Reply to thread

Message

<blockquote data-quote="kev216" data-source="post: 706759" data-attributes="member: 26237">Yes the free version does have (limited) zero day protection. It has local signatures, but it also uses the Sophos cloud and I guess heuristics too. Detection based on file reputation shared by the community of users is also available in the settings. It also has behavioural detection, however it is fully automatic and thus there is no user interaction when it does detect some suspicious behaviour of a process on your computer. It is a kind of an automatic hips module. It does work quite well, i&#039;ve seen some alerts myself where it was flagging some processes as suspicioius when I ran some zero day samples in a virtual machine. In the (not paid yet) beta version, there is some additional protection similar to hitman pro alert, but not in the free one.The auto remove threats is something that is discussed a lot about this product. I&#039;m not really a fan of it either, a quarantine where you can restore files would be much better. However, since one of the main things the sophos team is working on is providing zero to no false positives, it isn&#039;t a big deal for me personally (I never had a single fp the past months), however I would like to see a quarantine too. I have already reported this to the Sophos team several times, and not so long ago, they said on another forum that they are working on something like a quarantine for another product, and they maybe will implement it in Sophos Home too, but I guess it will still take some time.</blockquote>

[QUOTE="kev216, post: 706759, member: 26237"] Yes the free version does have (limited) zero day protection. It has local signatures, but it also uses the Sophos cloud and I guess heuristics too. Detection based on file reputation shared by the community of users is also available in the settings. It also has behavioural detection, however it is fully automatic and thus there is no user interaction when it does detect some suspicious behaviour of a process on your computer. It is a kind of an automatic hips module. It does work quite well, i've seen some alerts myself where it was flagging some processes as suspicioius when I ran some zero day samples in a virtual machine. In the (not paid yet) beta version, there is some additional protection similar to hitman pro alert, but not in the free one. The auto remove threats is something that is discussed a lot about this product. I'm not really a fan of it either, a quarantine where you can restore files would be much better. However, since one of the main things the sophos team is working on is providing zero to no false positives, it isn't a big deal for me personally (I never had a single fp the past months), however I would like to see a quarantine too. I have already reported this to the Sophos team several times, and not so long ago, they said on another forum that they are working on something like a quarantine for another product, and they maybe will implement it in Sophos Home too, but I guess it will still take some time. [/QUOTE]

Verification