While it is shitty that they did this in the first place, I just wanted to point out that Sophos has more than just AV software, and actually works really good at one of my old jobs. They use an XG firewall and Intercept X subscription. Plus RED VPN boxes to connect offices around the nation back to the XG. Those are handy. And the way the AV software works with the firewall is cool. Say a known threat is detected on a computer from a bad email, the software recognizes a weird change in the way the OS is operating and sends the info to the firewall. The firewall then isolates that computer from the rest of the network (but still communicates with the firewall) while the software works on cleaning/fixing the issue. Once cleaned and confirmed, the software sends the OK back to the firewall, which opens up the computer to the rest of the network again. Happens in seconds. Twice this happened during my employment there. The fix was done before a ticket was created by the user.
One time though, it ran on a false positive and didn’t complete the process. So I had some manual work to do. That pissed me off.
While it is shitty that they did this in the first place, I just wanted to point out that Sophos has more than just AV software, and actually works really good at one of my old jobs. They use an XG firewall and Intercept X subscription. Plus RED VPN boxes to connect offices around the nation back to the XG. Those are handy. And the way the AV software works with the firewall is cool. Say a known threat is detected on a computer from a bad email, the software recognizes a weird change in the way the OS is operating and sends the info to the firewall. The firewall then isolates that computer from the rest of the network (but still communicates with the firewall) while the software works on cleaning/fixing the issue. Once cleaned and confirmed, the software sends the OK back to the firewall, which opens up the computer to the rest of the network again. Happens in seconds. Twice this happened during my employment there. The fix was done before a ticket was created by the user. One time though, it ran on a false positive and didn’t complete the process. So I had some manual work to do. That pissed me off.