Sophos, what do we REALLY think.

[indiegirl]

HSBC Bank use Sophos (from my days there), and I have to say that v5 (which we use here) is an improvement over previous versions.

 

As for Panda, I tried the home version of that and it ground my machine (Athlon 2800) to a halt and wouldn't boot! That was very messy. As a result, I've stayed away from Panda ever since!

 

I would like to see an auto-cleanup with the viruses - it's very good at telling me that there's a virus on the machine through the console, but not whether it's actually been dealt with. Is this a common thing, or is something missing from our settings to auto-quarantine a virus? I tend to have to physically go to the machine to sort it out.

[E1uSiV3]

I would like to see an auto-cleanup with the viruses - it's very good at telling me that there's a virus on the machine through the console, but not whether it's actually been dealt with. Is this a common thing, or is something missing from our settings to auto-quarantine a virus? I tend to have to physically go to the machine to sort it out.

 

The policies you set in the console allow you to control this

[john]

For those who have a slow console, you basically need to clear out the MSDE database, there is a full article on the Sophos KB on how to do this, cannot put my hands on the link at the second, but will post when I find it, but basically you clear it out, it shifts all the errros and then makes the machines update again, but it works and then mine runs super fast for another month, and then about 30 days later, and 40,000 errors in the DB its dead again.

 

Edit - here is the linky - http://www.sophos.com/support/knowledgebase/article/2993.html

 

Also Woo! My 400th post!

[Dos_Box]

I would like to see an auto-cleanup with the viruses - it's very good at telling me that there's a virus on the machine through the console, but not whether it's actually been dealt with. Is this a common thing, or is something missing from our settings to auto-quarantine a virus? I tend to have to physically go to the machine to sort it out.

 

The policies you set in the console allow you to control this

 

Agreed. Sophos does not delete viruses by defualt because it is a CORPORATE AV solution. Simply deleting virus infected files may have the effect of making valuble files disappear before some kind of recovery can be done. I set mine to disinfect and delete if this is not possible.

[ZeroHour]

Hmm

I have mixed feelings about sophos, when we used version 3 I was a big fan. Some of you hated SAVAdmin but I quite liked it, I found it to be fast and *faily* light to run. The only thing was it was a pain to deploy changes to settings or truely keep an eye on the system.

Sadly I am someone who has had a HELLISH time with version 5, our sophos 5 machines break usually after the monthly engine update. Its random which ones do, its random what the console sees and they dont update. The usual fix is remove 5 and redeploy but that is really unworkable on a large network (450-500 clients).

Right now 5.20 *seems* to have gone well with only one machine stuck on damn N/A mode in the console.

Just a little of my $0.02