Reply to thread

Message

<blockquote data-quote="Trident" data-source="post: 1043744" data-attributes="member: 99014">I spoke to ZA contact today again and asked again for Program Control (the part of the firewall that automatically allows and blocks connectivity of programmes based on their reputation). The feature is on the roadmap. It was supposed to be released with “the next build” (that was before version 4) but the build 4 was only an emergency one to include Anti-Bot (after I requested it). Also in build 4 (again after my test and discussions with them), they included the full Sophos database and not just the cloud. The full Sophos database is divided in 2 parts.VDL (Virus Description Language): this is a permanent database updated once a month (about 250 MB).IDE: this is a database that is updated constantly over the course of one month. Viruses that are not significant are placed in few generic files, whilst viruses that have loads of variants are placed in a separate file, for example tesl.ide for Agent Tesla. After one month the IDE updates are merged with the VDL, deleted and the cycle repeats. The Sophos full database provides offline protection, together with static analysis.</blockquote>

[QUOTE="Trident, post: 1043744, member: 99014"] I spoke to ZA contact today again and asked again for Program Control (the part of the firewall that automatically allows and blocks connectivity of programmes based on their reputation). The feature is on the roadmap. It was supposed to be released with “the next build” (that was before version 4) but the build 4 was only an emergency one to include Anti-Bot (after I requested it). Also in build 4 (again after my test and discussions with them), they included the full Sophos database and not just the cloud. The full Sophos database is divided in 2 parts. VDL (Virus Description Language): this is a permanent database updated once a month (about 250 MB). IDE: this is a database that is updated constantly over the course of one month. Viruses that are not significant are placed in few generic files, whilst viruses that have loads of variants are placed in a separate file, for example tesl.ide for Agent Tesla. After one month the IDE updates are merged with the VDL, deleted and the cycle repeats. The Sophos full database provides offline protection, together with static analysis. [/QUOTE]

Verification