Skip to content

Sophos Protection for Linux filesystem support

This page describes the filesystems and file types that Sophos Protection for Linux (SPL) supports. This includes files that the SPL Agent scans and quarantines.

Supported filesystems


Unsupported filesystems may appear to work but can have unexpected results. We recommend excluding any filesystems that aren't on this list from scanning.

Sophos Protection for Linux supports the following filesystems:

  • bfs
  • btrfs
  • cifs
  • devtmpfs
  • ecryptfs
  • ext2
  • ext3
  • ext4
  • fuse
  • fuseblk
  • iso9660
  • jfs
  • jfs2
  • msdos
  • nfs
  • nfs4
  • overlay
  • squashfs
  • tmpfs
  • udf
  • vfat
  • xfs
  • zfs

Supported file types

The file scanning engine for SPL Agent doesn't assume a file type based on its file name or extension. The scanning engine inspects the file data to determine its file type.

On-demand archive scanning

SPL Agent supports archive file scanning for on-demand and scheduled scans only. SPL Agent can extract, decompress, and scan the contents of the following file types:

  • 7zip
  • Alz
  • Apk
  • Arj
  • ASPack
  • Bzip2
  • Cmz
  • Egg
  • Fsg
  • Gzip
  • Hqx
  • ISCabinet
  • ITSS
  • Lha
  • Lzip
  • Mbin
  • MSCabinet
  • MSCompress
  • PECompact
  • Rar
  • Rpm
  • Sfx
  • Tar
  • UnixArchive
  • Upx
  • Uue
  • Xar
  • Xz
  • Zip


SPL Agent supports many archive file types not explicitly listed because they're based on the same compression or archive structure as other supported file types. For example, a JAR file is supported as it's based on ZIP.