We were recently hit by Cryptolocker which destroyed a few thousand files before we found and disabled the infected system that was encrypting files on network shares. We looked at what happened and how to prevent it from happening again. We discovered that the Proactive Threat Protection module had malfunctioned on that system. We had to perform a repair to fix it. I asked support if I could create a report that would inform me when a module malfunctioned or better yet send me an email immediately when a module malfunctioned. I was told that neither of these capabilities exist in the product. It is incumbent upon me to constantly check the manager or try to be sure my employees are constantly watching their tiny icon for the green dot to turn yellow. I do not have time to constantly check and I cannot count on my employees to monitor your software. This is something you should do for me. If you had, I would have been saved the expense and time of a serious infection. Please fix this.
↧