Is there a way to configure automatic scanning of each media?

More or less that's all there is.

Trying to rephrase John:

Protection is achieved through on-access scanning which does what is necessary, so whatever is automatically accessed when the medium is inserted (e.g. autorun, boot sectors) is scanned but not all of the medium. While it is in theory possible to automatically fire a scan (which runs but lets you work with the with the medium while it's scanning) it would have a negative impact on performance and as on-access will anyway scan each file as it is accessed not increase protection. If you have any suspicion it's assumed that you'd run an on-demand scan. Of course there'd be the option to lock the medium until the automatic on-demand scan has finished - this means that, depending on the contents, you'd have to wait for a significant amount of time every time you insert a medium - an option you are very unlikely to use except for very special cases. 

Thus the option to automatically trigger a scan which would lock the medium until it is finished and can't be turned off by the user would rarely be used. If the user can turn it off then you can as well expect that he manually requests a scan when needed and waits for it to finish. This leaves cases as you described where you obviously perform "mass-scanning" - if you manually change the disks and have to wait for the scan to finish anyway, then why not perform a right-click scan?

That's not to deride you, I'm just trying to explain why (probably, I'm not Sophos) the feature isn't there. As said something like it could be scripted (e.g. using WMI ExecNotificationQuery for Win32_LogicalDisk )

Christian

More or less that's all there is.

Trying to rephrase John:

Protection is achieved through on-access scanning which does what is necessary, so whatever is automatically accessed when the medium is inserted (e.g. autorun, boot sectors) is scanned but not all of the medium. While it is in theory possible to automatically fire a scan (which runs but lets you work with the with the medium while it's scanning) it would have a negative impact on performance and as on-access will anyway scan each file as it is accessed not increase protection. If you have any suspicion it's assumed that you'd run an on-demand scan. Of course there'd be the option to lock the medium until the automatic on-demand scan has finished - this means that, depending on the contents, you'd have to wait for a significant amount of time every time you insert a medium - an option you are very unlikely to use except for very special cases. 

Thus the option to automatically trigger a scan which would lock the medium until it is finished and can't be turned off by the user would rarely be used. If the user can turn it off then you can as well expect that he manually requests a scan when needed and waits for it to finish. This leaves cases as you described where you obviously perform "mass-scanning" - if you manually change the disks and have to wait for the scan to finish anyway, then why not perform a right-click scan?

That's not to deride you, I'm just trying to explain why (probably, I'm not Sophos) the feature isn't there. As said something like it could be scripted (e.g. using WMI ExecNotificationQuery for Win32_LogicalDisk )

Christian