Dear All
Thought I might be able to get a thread going here whereby we post our Sophos AV setup and configurations. This way we might be able to see why others have implemented Sophos in a certain way and maybe understand better which policies need tweaking etc. I am about to harmonise our 4 offices installations of Sophos so before I do that hopefully someone will notice something possibly wrong with my setup or offer advice on why it should be changed etc.
So here goes...
- Sophos 9 running on a complete Windows environment synchronised with Active Directory.
- Each Sophos server controls its own policies. If I could configure one server for policies and push these policies out to the other sites that would be ideal, but I don't know if its possible and whether my branch office pc's would update correctly?
- Workstations check for updates every 60 minutes
- On Access scanning enabled on all workstations, behaviour = On Read
- Remote scanning of files disabled
- Auto cleanup of infected files, move to default location
- Web scanning is 'As on access'
- All Servers On Access scanning disabled, scheduled scans run each night at 9PM
- HIPS enabled for notifications only. Too many false positives for software updates IMO
We also use the Application Control and Device Control which (when working) helps us to nail down rogue apps!
If anyone has any recommendations for me to change I am all ears!
Cheers
This thread was automatically locked due to age.
