Windows Containers support

Hello Charles,

We do not support Docker containers with our Windows Server protection; we do with our Linux AV: https://community.sophos.com/kb/en-us/126006 

We can/do detect malware in the container if Sophos Server Protection is running on the host for Windows, but malware path reporting and cleanup is lacking. 

I'd appreciate your feedback about what you want from a container solution:

Do you want AV protection from an agent on the host server?

Do you want an agent that runs inside each container?

What about running a privileged container that can protect other containers?

Do you want visibility of container traffic?

Do you have concerns about checking the container image pre deployment to make sure that it is secure?

Regards,

Stephen

Hello Charles,

We do not support Docker containers with our Windows Server protection; we do with our Linux AV: https://community.sophos.com/kb/en-us/126006 

We can/do detect malware in the container if Sophos Server Protection is running on the host for Windows, but malware path reporting and cleanup is lacking. 

I'd appreciate your feedback about what you want from a container solution:

Do you want AV protection from an agent on the host server?

Do you want an agent that runs inside each container?

What about running a privileged container that can protect other containers?

Do you want visibility of container traffic?

Do you have concerns about checking the container image pre deployment to make sure that it is secure?

Regards,

Stephen

Hi Stephen,

I'm not concerned about whether the AV protection will run inside the container or not.

I would like a recommendation from Sophos about how to protect running Windows containers from virus and malware attack.

Regards,

      Charles

We have done some testing and can confirm that we will do the following for Windows containers:

• detect access to malicious files within a container
• detect malicious files written inside a container

Note: We cannot disinfect files within a container.

Stephen,

That sounds good.

Are you saying this is already supported when running Sophos on container host?

What about the issues with Docker commands hanging when running Sophos on host? How should that be addressed?

Regards,

      Charles