if we block the file that was blocked , if it harmful is there any way to remove from triggered machines even it is blocked

[Pruthvirajnasagoni89418]

Hi Team,

we are blocked file where we considered as malicious, that file resides in machine is there any way to pull out via cisco console itself. or any script can used to delete from those machines?

Regards,

Pruthvi

[Troja007]

Hello @Pruthvirajnasagoni89418,

can you explain the situation please a little bit more clear? What means "if we block the file that was blocked"?
- was there a Threat blocked?
- have you configured a Simple Detection?
- have you configured a Applications Blocklist?
- What is the file type of the blocked file?

What is the exact problem? Does AMP not detect a Threat?

Without some details it is hard to help.

Greetings,

Thorsten

[Pruthvirajnasagoni89418]

Lets say i have file which is detected  as malware and blocked , if it is harmful ,  i want to remove it from machine , how i can do that, is there any option as such in policy -> detect and delete?