Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 10 replies
  • Subscribers 1 subscriber
  • Views 19929 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

not fully tamper protected

rino19ny

evaluating the latest endpoint protection deployed from the console (ver 5.2.1 R2). i have enabled tamper protection but some parts of the user AV is still not greyed out.

how can we prevent users from changing AV settings? even prevent uninstalling by them?

:50470


This thread was automatically locked due to age.
Parents
  • 0

    Hello rino19ny,

    TP applies to (Sophos)Administrators only (you can a few threads here where this has been discussed). It also doesn't claim to prevent any fiddling with the product (or the OS for that matter - please see the Note: in How do I: Understanding Tamper Protection), "protection" against manipulation by dedicated users with administrative rights is not a simple task. TP is intended for situations (especially with notebooks) where it is (seemingly) unfeasible to allow the use of certain hard- and software features without giving the user administrative rights.  

    Which kind of misconfiguration do you worry about? Please note that the On-Access ("real time") settings are unavailable - thus scanning can't be "turned off".  

    Christian

    :50518
Reply
  • 0

    Hello rino19ny,

    TP applies to (Sophos)Administrators only (you can a few threads here where this has been discussed). It also doesn't claim to prevent any fiddling with the product (or the OS for that matter - please see the Note: in How do I: Understanding Tamper Protection), "protection" against manipulation by dedicated users with administrative rights is not a simple task. TP is intended for situations (especially with notebooks) where it is (seemingly) unfeasible to allow the use of certain hard- and software features without giving the user administrative rights.  

    Which kind of misconfiguration do you worry about? Please note that the On-Access ("real time") settings are unavailable - thus scanning can't be "turned off".  

    Christian

    :50518
Children
No Data