Sophos configuration

[Bobo]

Afternoon, was a query more than anything, how do you guys configure your sophos to have little impact on the computers but still deliver tight security?

 

How do you change your sophos away from default?

[Linfit]

We use on access scanning on workstations and have scheduled scanning turned off, and the opposite on servers; on access is turned off (would be a nightmare on file servers) but a scheduled scan runs every night.

What is very important is that scanning of remote drives is switched off, otherwise it makes things like SIMS unusable.

[ZeroHour]

I would switch from read on-access to both write and on rename. That should improve performance anyway.

I would do a scheduled scan on clients but only at night if the pc happens to be on.

 

To set these options you can do it easily using the EM Console sophos has and setting up policies.

[Michael_84]

I've set a Scheduled scan at 12 so it won't affect everyone using the network as some with be on lunch:D (clients only), on server I disabled onaccess scan.

 

A performance saving option is to disable onaccess scanning on remote drives, Sophos was killing loading SIMS quickly with that option enabled, oh and I made sure that if Sophos finds anything suspicious on the students systems to disable access

[Bobo]

Thanks for the input guys, have moved back to Sophos after a fair few years with Mcaffee and seeing the customer this avo to try and sort out some performance problems that I feel sophos is adding towards, no time to properly investigate the good ole fashion way, so these pointers are appreciated.