We are also experiencing quite a few FP's with Local analysis on weekly basis (almost every day). And our environment isn't even big, only around 80 endpoints. Therefore, we are considering turning it only to notification, since our client's aren't happy with Traps keep on blocking new installations, either when they are offline or the executable is unknown to WF. However, I've noticed that from yesterday, there's new content update available which include new LA algorithm, hence we'll give it a chance one more time. Regards, Uroš
... View more
