The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
This article answers the frequently asked questions on the App Reputation feature in Sophos Mobile Security.
The following questions are answered:
Applies to the following Sophos products and versions Sophos Mobile Security for Android
Operating systems Android
App Reputation uses Sophos Live Protection to provide more information about the apps which should be installed. A warning is displayed for apps that have low reputation, giving users the option to make an informed decision to either authorize or uninstall the app. The result of the user's decision is sent back to Sophos Labs to improve the quality of the reputation data.
When the App Reputation feature is turned on, Sophos Mobile Security incorporates the low-reputation category in all scans. In addition, Sophos Mobile Security checks every application on startup and provides feedback to the user if a low-reputation app is detected.
For applications that have a low-reputation, are malware or that are Potentially Unwanted Applications (if PUA detection is turned on) Sophos Mobile Security will send a notification to the user they start the application.
In addition, the user has the option to prevent the app from starting, start it only for a certain period of time (i.e. until the next unlock of the device), or to add this app to the allowed apps list.
You can display this allowed apps list in the SMSec settings. You can also remove allowed applications from this list. Applications with high reputation can start without any interaction with Sophos Mobile Security.
The reputation of an app is determined by the apps prevalent across the Sophos Mobile Security customer base, as provided by Live Protection telemetry data, SophosLabs detection data, and feedback data based on user actions. These user-driven feedback is collated and processed continuously to improve the quality of the reputation data.
See, How to request an app reassessment to increase your app reputation
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.