how can i check my sophos enterprise having signature Wana Decrypt0r 2.0 Ransomware

Hi,

If you click on the View-bootstrap locations menu item in SEC you can see all the distribution points being maintained by Sophos Update Manager.

Then given this article:

https://community.sophos.com/kb/en-us/126733

...you can see the file names of the .ide files that provide protection.  One way would be to generally check that the .ide files in the locations are recent and the ones referenced exist.

If you double click on any client you can see the .ide file list also.  Plus there is an ide count column to also give you some confidence.

It is also possible to query the SEC database to query on the ide list if really required but the above should give you confidence things are working.

Regards,

Jak

Hi,

If you click on the View-bootstrap locations menu item in SEC you can see all the distribution points being maintained by Sophos Update Manager.

Then given this article:

https://community.sophos.com/kb/en-us/126733

...you can see the file names of the .ide files that provide protection.  One way would be to generally check that the .ide files in the locations are recent and the ones referenced exist.

If you double click on any client you can see the .ide file list also.  Plus there is an ide count column to also give you some confidence.

It is also possible to query the SEC database to query on the ide list if really required but the above should give you confidence things are working.

Regards,

Jak