This knowledge base article answers the frequently asked questions about the App reputation feature in Sophos Intercept X for Mobile.
The following questions are answered:
Applies to the following Sophos products and versions Sophos Intercept X for Mobile Android
App reputation uses Sophos Live Protection to provide more information about the apps which should be installed. A warning is displayed for apps that have low reputation, giving users the option to make an informed decision to either authorize or uninstall the app. The result of the user's decision is sent back to Sophos Labs to improve the quality of the reputation data.
When the App reputation feature is turned on, Sophos Intercept X for Mobile incorporates the low-reputation category in all scans. In addition, Sophos Intercept X for Mobile checks every application on startup and provides feedback to the user if a low-reputation app is detected.
For applications that have a low-reputation, are malware or that are Potentially Unwanted Applications (if PUA detection is turned on) Sophos Mobile Security will send a notification to the user they start the application.
In addition, the user has the option to prevent the app from starting, start it only for a certain period of time (i.e. until the next unlock of the device), or to add this app to the allowed apps list.
You can display this allowed apps list in Sophos Intercept X for Mobile Settings page. You can also remove allowed applications from this list. Applications with high reputation can start without any interaction with Sophos Intercept X for Mobile.
The reputation of an app is determined by the apps prevalent across the Sophos Intercept X for Mobile's customer base, as provided by Live Protection telemetry data, SophosLabs detection data, and feedback data based on user actions. These user-driven feedback is collated and processed continuously to improve the quality of the reputation data.
Follow the steps in the KBA 124314.
Sign up to the Sophos Support SMS Notification Service to get the latest product release information and critical issues.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.