Hello
Endpoint Security and Data Control.
One of the things I think is lacking when Sophos detects a threat is the option to ask the user if they want to ignore it.
The On-access scanning options for Anti-Virus policies in the Enterprise Console do not include 'Ask me what to do'.
I live in dread of a time that Sophos might detect a false positive and quarantine it (I don't delete at all), and it turns out to be a vital system file.
Admittedly, this has not happened to me yet. However, after reading one of the threads that appeared in the Endpoint Security and Data Control here I feel the option to ignore is something that should be considered in future releases.
The AV software I use on my home computer never automatically quarantines/deletes anything and always displays a list of any detections and asks what should be done with them. This gives the user time to check the detections and determine if they are false positives etc.
Any opinions on this?
This thread was automatically locked due to age.
