ransomeware

Question

Hi, 
 How to enable crypto guard on sophos ? . Other than cryptoguard do I need any other policies to protect from ransomeware . 
 Cryptoguard still behaviour based .If that is the case how it protect from new ransomeware ? 
 Thanks

DianneY · Answer

Hello aims2019 aims 
 Putting a check on "Use Recommended Settings" should enable Cryptoguard by default, otherwise, from your Threat Protection policy, go to "Runtime Protection" and put a check on "Protect document files from ransomware (CryptoGuard)". 
 CryptoGuard is constantly monitoring file writes for encrypted files. If it detects that actions behave like ransomware, it will restore the impacted files and stop the execution of the detected process. 
 More information here: Sophos Central Server, Central Endpoint: CryptoGuard detections and required actions