Does Sophos provide any type of checksum verification for the downloads? This would be a way to make sure the download was not corrupted or altered. It's not necessary but something that be should be done regardless.
This thread was automatically locked due to age.