Intercept X with Security VM

Question

Hi, 
 
 I'm implementing Sophos SecurityVM into an ESXi environment on multiple hosts. The documentation of Sophos SecurityVM states that this is a full Anti-malware, Anti-virus and Anti-spyware product. 
 My question is, is Intercept X included as part of this protection? 
 If I install the full Sophos Endpoint solution on all VM's individually, then we would get the Intercept X protection, but it seems this protection is not there with Security VM. If this is the case, what is the advantage of SecurityVM over the full Sophos Endpoint product? 
 
 Kindest Regards 
 Dave S. Chunilal

StephenMcKay · Accepted Answer

Hi Dave, 
 Intercept X can be installed alongside 'traditional' AV as Christian states; however we do not support Intercept X running on a GVM running SVE currently, we are looking to add support for their co existence later this year. 
 Regards, 
 Stephen

Barb@Sophos · Answer

Hello Dave Chunilal. Please have a look at this document regarding Sophos for Virtual Environments 
 The startup guide covers the protection (real-time scanning) offered and how to test it. Relevant sections: 8 Check that guest VMs are protected......................................................................................19 8.1 Check the protection settings...................................................................................19 8.2 Test real-time scanning.............................................................................................19 8.3 Troubleshoot real-time scanning...............................................................................20 Here's further info about Sophos for Virtual Environments: Frequently Asked Questions If you are trying to determine which product will work best for your setup, then I recommend reaching out to a Sophos Partner, as they are better equipped to answer those questions and assist you. Regards,

StephenMcKay · Answer

Hi Dave, 
 Using SVE and the SVMs, allows for off board anti-malware scanning only, it does not include the Intercept X features. I believe the team are looking at providing an option to run Intercept X alongside SVE but until this is supported you would need to deploy the full agent to benefit from the Intercept X features. 
 Regards, 
 Stephen