Sophos Central alert stuck - Malware or potentially unwanted applications in quarantine

Issue

Sophos Central web console reports a PC with medium severity alert "Malware or potentially unwanted applications in quarantine". The potentially unwanted application (PUA) in question has been since added to the global Sophos whitelist is no longer triggering any new alerts. However, this particular alert got stuck and can not be cleared using normal methods.

Sophos Central Alert

Open VPN GUI (Windows) - VPN connected but data transfer fails

Open VPN

Issue

Open VPN GUI client connects to the Open VPN server, the user can successfully open server shares and browse folders but trying to open or transfer any file fails (connection times out). No errors or warnings were present in OpenVPN logs. The issue was only affecting one particular user and only when he was working from his home office. The same user with the same laptop could use the same VPN connection from other locations with no issues. My first thought was that it was the ISP interfering with some sort of Deep Packet Inspection firewall but that didn't appear to be the case.

Sort Windows 10 VPN list alphabetically

Windows 10 VPN list

Windows 10 VPN connection are listed in order how they were added which can get quite disorganised with a large number of VPN connections. This affects VPN connection list found in Settings > Network & Internet > VPN and one shown after clicking the Network icon in the Windows taskbar.

Newsletter

Subscribe to receive occasional updates on new posts.
Your email will not be used for any other purpose and you can unsubscribe at any time.
Please wait