Anti-virus and HIPS policy

An anti-virus and HIPS policy enables you to do the following:

• Detect known and unknown viruses, Trojans, worms, and spyware automatically as soon as users attempt to copy, move, or open files that contain them.
• Scan for adware and other potentially unwanted applications.
• Scan computers for suspicious files and rootkits.
• Detect malicious network traffic, that is, communications between endpoint computers and command and control servers involved in botnet or other malware attacks.
• Automatically clean up computers as soon as a virus or other threat is found.

  For information about changing the settings for automatic cleanup, see Set up automatic cleanup for on-access scanning.

• Analyze the behavior of the programs running on the system.

  For more information, see Behavior monitoring.

• Scan computers at set times.

  For more information, see Create a scheduled scan.

You can use different scanning settings for each group of computers. For detailed information about configuring scanning settings, see the following topics:

• Configure on-access scanning
• Configure scanning settings for a scheduled scan

For information about scanning and cleanup options that do not take effect on Mac, Linux or UNIX, see Settings not applicable on Mac, Linux or UNIX.

For information about scanning and cleanup options that do not apply to Sophos Anti-Virus for VMware vShield, see Sophos knowledgebase article 121745. For Sophos Anti-Virus for VMware vShield, version 2.x, see also the Sophos Anti-Virus for VMware vShield configuration guide available at www.sophos.com/en-us/support/documentation/sophos-anti-virus-for-vmware-vshield.