Policy settings

The options that you can use for Security VMs

Live Protection

Live Protection checks suspicious files against the latest malware information in the SophosLabs database.

Option

Supported?

Use Live Protection

Yes

Automatically submit malware samples to SophosLabs

No

Real-time scanning

The options for Real-time scanning are as follows.

Option

Supported?

Enable or disable

Yes

Scan local, or scan local and remote

Yes

On read

No

On write

No

Real-time scanning - Internet

The options for Real-time scanning - Internet are as follows:

Option

Supported?

Scan downloads in progress

No

Block access to malicious websites

No

Detect low-reputation files

No

Remediation

The options for Remediation are as follows:

Option

Supported?

Automatic cleanup of malware

Yes

Real-time scanning - Options

The options for Real-time scanning - Options are as follows:

Option

Supported?

Automatically exclude activity by known applications

No

Detect malicious behavior (HIPS)

No

Scheduled scanning

The options for Scheduled scanning are as follows:

Option

Supported?

Enable scheduled scan

Yes

Runtime protection

The options for Runtime protection are as follows.

Option

Supported?

Detect network traffic to command and control servers

No

Protect document files from ransomware (CryptoGuard)

No

Enable Sophos Security Heartbeat

No

Scanning exclusions

The options for Scanning exclusions are as follows.

Option

Supported?

Global scanning exclusions

To edit these, go to Settings > Global scanning exclusions.

Yes

Policy scanning exclusions (Windows and Linux)

Yes

Policy Heartbeat exclusions (Windows only)

No

Exclude DNS server (Windows only)

No

Desktop messaging

The options for Desktop messaging are as follows.

Option

Supported?

Enable desktop messaging for Threat Protection

No