Better handling of alerts when a firewall blocks an application
Currently (7/1/20) in Sophos Central endpoints of ours with certain VPN software also installed will show events that a firewall has blocked application (fill in the blank). There's a couple of things I'd like to see improved. In our case this is normal for our VPN software to do this. These events along with other AV events can make it seem like something worse is happening at the endpoint, and can be misleading.
-What was the firewall or application that was seen blocking another application? Can the event also contain this information?
-Ability to ignore or make an exception for these alerts.
-These alerts are also not seen at the client side. It seems right to me that the client events and the server events match each other, however in this instance they do not.