Sophos recently released their new 9.5 endpoint protection which includes cloud integration and a firewall.Jointly may know, I have tried personally Sophos antivirus programs for 8 years, and I have been previously generally satisfied with the performance. I already have got one installation protecting a windows server and appreciate taking care free capability when compared with competitors.I also appreciate the company is usually on the forefront of combating the most recent viruses and exploits (essentially pushing the boundaries in the marketplace). Also new in this version, is tamper and web protection,Sophos Live real-time updating, and much more.Setting up Sophos 9.5 was easy. There’s two versions with the endpoint protection, the 70 megabyte standard, and also the 75 megabyte edition having a firewall.What%u2019s nice is always that both setup files support 32 and 64 bit systems completely time for Windows 2000, in a single compact executable. The installer prompted to install the optional firewall component and also has an alternative to eliminate alternative party security software that will conflict with program. After the installation completed, a restart was required to install the firewall driver. After the reboot, it took Windows a different 20 seconds to end booting towards the desktop. The Sophos 9.5 scanning options stay with all the %u201CScan my computer%u201D and also the %u201Cset up a new scan%u201D. However, inside customize scan option you’ll find new settings to configure. In the advanced area one can specifically set to decompress which types of archives and which sort files to skip.This appears to be probably the most advanced exclusion type listing of all free antivirus tested. Sophos 9.5 scans at approximately 6 megabytes per second putting it slightly above the benchmark antivirus.
This system immediately detected a computer virus on the test system which ironically is Blue Atom Antivirus (Antivirus.exe along with a Sus/Com-Pack-C).This is clearly an incorrect positive and which I believe is attributed to a completely sensitive HIPS engine.I have also received a false positive from Webex PcNow by Cisco with a Reg-Mon alert.NirCmd.exe seemed to be on the test system which is actually malicious.The scan takes a long time to complete (speed hasn%u2019t changed significantly from previous versions and after 20 mins was still on 2% presumably due to the rootkit scan which is separate and slow).If a person wants the scan to get faster disable the rootkit option.Together with an antivirus engine, Sophos 9.5 features a firewall.The problem is that this firewall prompts for every network /application protection.For instance, simply opening a typical browser such as Web Browser or FireFox, one is prompted to permit or disallow.The tradeoff is for a small company or organization a big firewall rule set might be beneficial in keeping unwanted connections in and out of a method, however, for someone, this may be extremely tedious to classify almost every firewall rule (not forgetting radio stations boxes come in some other order from tuned in to alert).I do think the firewall should at least include some auto learning rules for common applications. However, some advantages to the firewall are its advanced handling of ICMP traffic (a frequently abused protocol),a LAN exclusion list for local networked computers, location based rule sets for roaming and wireless users, and an improved logging system which shows active connections and hidden processes.Some additional intriguing features will be the tamper protection in which a user a must enter defined password to uninstall or modify the program, and a secondary update server if the first failed.
Resource usage is about the same with Sophos 9.5. The programs uses about 160 megabytes across 9 process while idle. When scanning, the memory usage remains on the same and uses about 10 percent CPU power, which is more than the typical free antivirus. Some things that I must see improved can be a simpler to use interface (probably won%u2019t matter in a business setting), more effective resource usage, possibly a memory scan, and specifics of scans (a separate progress bar many different scanners).
{ 0 comments }