This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Malicious Traffic detection

I am planning to enable MTD across the organization and have few questions since we are not using web control of Sophos endpoint security and control as we have other stuff for it.

Web control needed to enable MTD? or it's independent?

Where we can see download reputations in console? is it visible after enabling MTD?

 



This thread was automatically locked due to age.
Parents
  • Him

    MTD is independent of Web Control.  Web Control is part of the Sophos Anti-Virus component.  MTD has it's own MSI and a separate component.

    MTD and Download Reputation are reasonably new.  What version of Enterprise Console are you running? It could be you need to update SEC.  The latest version of SEC is 4.5.1.

    These articles may help you:

    Possible upgrade paths for Sophos Enterprise Console - https://community.sophos.com/kb/en-us/119105

    Information on Sophos Enterprise Console 5.4.0 - https://community.sophos.com/kb/en-us/123896 
    Download reputation:

    • This a feature of the Windows Endpoint product that checks files downloaded from some internet browsers and generates a reputation score. Using this score files are grouped into a number of reputation categories. For more information see article 121319.

    Information on Sophos Enterprise Console 5.4.1 - https://community.sophos.com/kb/en-us/124671 

    Information on Sophos Enterprise Console 5.3.0 - https://community.sophos.com/kb/en-us/121956

    • Malicious Traffic Detection (MTD). This feature detects communications between endpoint computers and command and control servers involved in botnet or other malware attacks. For more information see article 121607.

    Regards

    Jak

Reply
  • Him

    MTD is independent of Web Control.  Web Control is part of the Sophos Anti-Virus component.  MTD has it's own MSI and a separate component.

    MTD and Download Reputation are reasonably new.  What version of Enterprise Console are you running? It could be you need to update SEC.  The latest version of SEC is 4.5.1.

    These articles may help you:

    Possible upgrade paths for Sophos Enterprise Console - https://community.sophos.com/kb/en-us/119105

    Information on Sophos Enterprise Console 5.4.0 - https://community.sophos.com/kb/en-us/123896 
    Download reputation:

    • This a feature of the Windows Endpoint product that checks files downloaded from some internet browsers and generates a reputation score. Using this score files are grouped into a number of reputation categories. For more information see article 121319.

    Information on Sophos Enterprise Console 5.4.1 - https://community.sophos.com/kb/en-us/124671 

    Information on Sophos Enterprise Console 5.3.0 - https://community.sophos.com/kb/en-us/121956

    • Malicious Traffic Detection (MTD). This feature detects communications between endpoint computers and command and control servers involved in botnet or other malware attacks. For more information see article 121607.

    Regards

    Jak

Children