Troubleshoot on-access scanning

If on-access scanning is not working:

  1. Ensure that the Security VM is in a group whose anti-virus policy specifies that on-access scanning should be turned on:
    1. In Enterprise Console, in the Groups pane, right-click the group that contains the Security VM and select View/Edit Group Policy Details. Check which anti-virus and HIPS policy is used.
    2. In the Policies pane, double-click Anti-virus and HIPS.
    3. Double-click the policy that is used by the group that contains the Security VM.
    4. In the On-access scanning panel, ensure that the Enable on-access scanning check box is selected. Click OK.
    5. In the computer list, right-click the security VM and select Comply with. Then select Group anti-virus and HIPS policy.
    6. Check that the Security VM is shown as compliant with the policy.
  2. Ensure that the guest VM is protected. Go to the Security VM host and look in the log file.
  3. Ensure that Windows Security Center shows the guest VM as protected by Sophos for Virtual Environments.
  4. Check that there are no pending restarts requested by Microsoft updates. These can prevent installation of the Sophos Guest VM Agent from being completed.
  5. Check that there are no other anti-virus products installed. On server platforms where the security center is not present check that Windows Defender isn't active. Remember that you cannot use Sophos for Virtual Environments to protect guest VMs that run other anti-virus products.
  6. If on-access scanning is still not working, contact Sophos Technical Support.