Sophos in android doesn't have a proper on install scan methodology. It should scan each and every app regardless of user choice, as soon as it is installed in the device no matter from which source, whether or not it was installed by user or installed automatically. I installed an apk using Google Files app, and Sophos didn't scan the app immediately at all. When I install from other file manager apps or any other app, it asks me if I want to open the apk with Sophos scanner. It shouldn't ask me and rather scan it after install automatically and immediately without needing any confirmation from user. Malicious programs like Pegasus that installs itself automatically in the background, would certainly get through the defenses of Sophos in android, if this methodology of scanning is continued.
The scheduled scanner isn't enough as , it gives away a long period of time to a virus to act before it is scanned,detected and removed.
Hello Sohan,I see, so what you require here is the on-access scanning which will scan your device every time a new file has been detected, as of now this feature isn’t available yet on Sophos mobile intercept…
Hi Sohan,Thank you for reaching us, Do you have a task bundle that is set to scan your device every time there are now apps added/installed on the system? Is it currently set to automatic scan?
In the Sophos android app, in settings, it is set to automatic periodic scans which is set to daily while charging. The lowest interval is every 6 hours. Is this what you are asking about?
Hello Sohan,I see, so what you require here is the on-access scanning which will scan your device every time a new file has been detected, as of now this feature isn’t available yet on Sophos mobile intercept X for Android. You can send us a feature request through our Sophos ideas portal in order for our Dev team to reconsider adding this feature. If you're an enterprise user, You can contact your Account manager in order to directly raise this to our Product manager.