Anti Virus - Settings and Detections

Question

Hi all, 
 Couple questions - 
 
 1. I find that the Endpoint Protection AV Scanning has pretty noticeable CPU usage when scanning - Is it really necessary to have this on Read and Write scanning these days if you also have Intercept X? What has less impact Read or Write scanning? What do I lose by turning off one of them? So many products have completely ditched AV scanning and seem to work effectively. 
 
 2. What is the percentage of Malware caught though the Endpoint Protection AV Scanner vs the next-gen tech of Intercept X?

Barb@Sophos · Answer

Hello LRB, Sophos offers a multi-layered approach to ensure that it can detect different types of attacks. We provide Best Practices ideas , as well some recommended vendor exclusions which can help with performance. Based on your environment and needs, you can create Global Scanning exclusions at your own discretion , as well as turn off any features you'd like, however not recommended. If you are experiencing a noticeable performance issue, the best course of action would be to file a case with support so that they can further assist you. Regarding your second question, have a look at this site to see what's covered/protected by each product. 
 If you would like to discuss what's the best product for your environment, please reach out to a Sophos Partner for assistance. Regards,