Sophos on-acces settings - what do you do?

[ajbritton]

We've noticed that Sophos seems to slow down various apps when the on-access scanner is set on its most draconian (scan all files, scan archives etc). What settings do other Sophos users recommend?

[NetworkGeezer]

We've noticed that Sophos seems to slow down various apps when the on-access scanner is set on its most draconian (scan all files, scan archives etc). What settings do other Sophos users recommend?

 

Yes, in particular does the wonderful new version 5 not slow the start up of SIMS.net quite as much.

[Geoff]

Servers: No on access scanning, just scheduled scans.

 

Workstations: On access scanning on write. Scan everything.

[ajbritton]

Workstations: On access scanning on write. Scan everything.

 

Geoff...How would that catch a virus brought in on a floppy or other removable memory device?

[Geoff]

When it attempts to infect the local windows installation.

 

USB/Floppys/CD's are disabled here anyways.

[NetworkGeezer]

When it attempts to infect the local windows installation.

 

USB/Floppys/CD's are disabled here anyways.

 

Yeah, .exe blocking will help with warez borne malware but VBA and other script viruses are a little more to deal without on-access scanning. You can't block users from opening Word documents can you.

[Geoff]

I'd like to see a word macro virus run in Open Office Writer...

[Ric_]

You could always tell it to scan removable media on read too if you felt it to be necessary