pt testing and no notification

Question

Hi 
 One of our customers did pen test. 
 They run Nesson, port scan and all kind of queryies, in the Sophos portal nothing in the logs or in the detection. 
 man in the middle, nothing from the Sophos and nothing in the logs. 
 Mybe there is a problem with my configuration or notification? 
 
 Shay

Maxim-Sophos · Answer

The Intercept X endpoint would not typically detect port scans or other network probing. You would expect a firewall or NDR solution to address suspicious network activity. If enrolled in the Early Access Program, with IPS enabled, Intercept X would detect certain real-world network attacks. And, of course, CryptoGuard defends against ransomware encrypting files via shared directories.

pt testing and no notification

Top Replies