Windows Defender not detecting that Sophos for Virtual Environments is installed

Hello,

This is true for Server 2016; https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016 

Basically, changes were made that make removing Defender more difficult for 3rd party AV. 

This KBA https://community.sophos.com/kb/en-us/125679 should provide details of checking your Guest VMs

Stephen

Stephen,

When I install the full Sophos client on Windows Server 2016, Defender automatically recognizes that I have another anti-virus installed and disables itself.  I am not meaning removing Defender but rather disabling it.  So are you saying that Sophos for Virtual Environments is a different from the full Sophos client in that defender does not recognize it as a anti-virus solution because this link (https://www.sophos.com/en-us/medialibrary/PDFs/factsheets/sophos-virtualization-security-dsna.pdf?la=en) specifically mentions that it has integration with Windows Security Center?  

-Kyle

Stephen,

When I install the full Sophos client on Windows Server 2016, Defender automatically recognizes that I have another anti-virus installed and disables itself.  I am not meaning removing Defender but rather disabling it.  So are you saying that Sophos for Virtual Environments is a different from the full Sophos client in that defender does not recognize it as a anti-virus solution because this link (https://www.sophos.com/en-us/medialibrary/PDFs/factsheets/sophos-virtualization-security-dsna.pdf?la=en) specifically mentions that it has integration with Windows Security Center?  

-Kyle

Kyle,

I'll need to check with the development team, it certainly was the case that the behaviour of Defender and System Center changed in Server 2016

On Windows Server 2016, Windows Defender AV will not enter passive or disabled mode if you have also installed a third-party antivirus product. If you install a third-party antivirus product, you should uninstall Windows Defender AV on Windows Server 2016 to prevent problems caused by having multiple antivirus products installed on a machine.

https://docs.microsoft.com/en-us/windows/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility 

Stephen

Hi KyleGilpin 

After investigation it seems you have found a small bug. We have logged this and will put it in the next available release. 

Unfortunately it will not be in SVE 1.2, as we have passed development stage, but we will aim for the next maintenance update. 

Thanks 

Mark