Windows defender

Hi Timothy,

Intercept X and Windows Defender will work together as long as Windows Defender is not running exploit mitigation.  Sophos Server Protection and Windows Defender will cause a drop in performance and is not recommended.

As for why Windows Defender doesn't turn itself off, this is a design change from Microsoft starting with Windows Server 2016.

"In Windows Server 2016, Windows Defender AV will not disable itself if you are running another antivirus product."

Source: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016

Thanks. So should defender be disabled? I can’t find any documentation from sophos about the process.

Hi Timothy,

I'd advise on disabling Windows Defender unless you have real-time scanning disabled in your Sophos Threat Protection policy.  Two AVs fighting for file access at the same time tends to cause performance issues.

Hi Timothy,

I'd advise on disabling Windows Defender unless you have real-time scanning disabled in your Sophos Threat Protection policy.  Two AVs fighting for file access at the same time tends to cause performance issues.