How do I know if Sophos is working?
This thread was automatically locked due to age.
Download an eicar sample from the internet (don't worry -- eicar isn't actually malicious, everyone just detects this test file) and see what happens.
Also, good indicators are if the S shield shows up in your menu bar, and if the Intercheck process is running in the background (found by running Activity Monitor). Sophos will also usually alert you if something is not working correctly.