Validate BOPS is disabled

Hi,

 

In https://community.sophos.com/kb/en-us/36501  it is mentioned that "BOPS has been globally disabled in the endpoint product, we continue to show the policy option in SEC but currently ignore the selected setting".

 

As the option to "Detect buffer overflows" is still available in AV-HIPS policy, how do we make sure that this setting has been globally disabled? The reason I'm asking is that because we have seen performance issues in SQL servers as documented in https://support.microsoft.com/en-us/help/2033238/performance-and-consistency-issues-when-certain-modules-are-loaded-in and that we currently have plenty of AV & HIPS policies in which this option is enabled. We want to make sure that we do not have to manually untick the box in all AV HIPS policies we have.

 

Thanks in advance for your help!

 

Lamien