Sophos Windows Module

1
Sophos Windows Module
Sophos Windows Module

• Excellence in Computer Support
•    Software Security Tools Workshop

Excellence in Computer Support    Software
Security Tools Workshop
2
Sophos Windows ModuleSyallabus

• What is Sophos
• How and Who can use it
• Installing Sophos
• Using Sophos
• Troubleshooting and Gotchas

3
Sophos Windows ModuleWhat is Sophos

• What is Sophos Anti-virus and why is it important?

4
What is Sophos?

• Sophos detects and removes viruses, and blocks
  new virus threats before people can infect their
  PCs.

5
What is Sophos?

• A virus is software designed to be executed by
  another program on a persons computer.
• A virus has several forms worms, email and
  computer viruses.

6
What is Sophos?

• Worm - usually exploits a security hole and then
  attempts to infect other computers using the same
  exploit.

7
What is Sophos?

• Computer Virus - is a small program that is
  attached to another legitimate program. When the
  infected program is run, the virus loads into
  memory and looks for another program to attach
  itself to and they attack the system.

8
What is Sophos

• Email Virus - is a program that infects a
  computer and then replicates itself through the
  email system by emailing other users the virus.

9
Sophos Windows ModuleHow and Who can use it?

• Sophos Anti-Virus how it works at UCSF. Who can
  use it and what are the minimum requirements?

10
How is it used

• Sophos is loaded on UCSF computers and monitors
  the system from a task bar icon.
• When you or the system reads a file, Sophos will
  scan that file.
• Performs a daily scan at a pre-selected time.

11
Who can install and use it

• Sophos is available to all members of the UCSF
  community for use on UCSF-owned and personal
  computers

12
UCSF Support Model

• Users contact CSCs
• If CSC cannot resolve the CSC contacts OAASIS
  help desk
• OAASIS contacts Sophos.

13
Supported Platforms

• Windows 98 SE, ME and NT With IE 5 or better),
  ME, 2000 w/ SP2, XP w/ SP1
• 128 MB of RAM
• 90 MB of disk space

14
Not Supported Platforms

• Mac, Unix, Linux and Novell
• 128 MB of RAM
• 90 MB of disk space

15
Sophos Windows ModuleInstalling Sophos

• Where and how do you install Sophos?

16
Installation Process

• Download the Sophos from the Office of Academic
  and Administrative Systems (OAAIS) website at
• https//its.ucsf.edu/services/login/login.jsp?dest
  ination/information/software/license/sophos/sopho
  s_enterprise.jsp/
• Input your UCID and the last 4 digits of your
  Social Security Number

17
Installation Process

• Fill out the form and select Proceed to Download
  Site

18
Installation Process

• Select Save and choose a location on your hard
  drive.
• Open the location where you saved and run the
  software from there.

19
Installation Process

• Select Run

20
Installation Process

• Select Yes

21
Installation Process

• Select Next

22
Installation Process

• Sophos will start installing

23
Installation Process

• The Sophos icon will show up on your task bar.
• The icon will turn green when it is updating.
• The Sophos icon will be blue when the
  installation finishes

24
Sophos Windows ModuleUsing Sophos

• Who and how can Sophos configuration be changed?

25
Using Sophos

• To change the Sophos Settings
• Right Click the Sophos Icon
• Select the Open Sophos Anti-Virus

26
Using Sophos

• Three User Configuration Levels
• Sophos User Cannot Adjust any Settings
• Sophos Power User Can only adjust Quarantine
  Settings
• Sophos Administrator Can adjust many settings

27
Using Sophos

• Sophos Main Menu User and Power Users

28
Using Sophos

• Sophos Main Menu Administrative User

29
Using Sophos

• Scan Local Disks

30
Using Sophos

• Setup New Scan

31
Using Sophos

• Scan Settings Menu

32
Using Sophos

• Disinfection Menu

33
Using Sophos

• Schedule this scan

34
Using Sophos

• Manage Quarantine Items.

35
Using Sophos

• Configure Sophos Anti-Virus

36
Using Sophos

• On access scan menu

37
Using Sophos

• Extensions Menu

38
Using Sophos

• Exclusions Menu

39
Using Sophos

• Disinfections Menu

40
Using Sophos

• Back to the Configuration Menu

41
Using Sophos

• Quarantine Manager

42
Using Sophos

• Configuration Menu

43
Using Sophos

• Event Log

• Event Log

44
Using Sophos

• Configuration Menu

45
Using Sophos

• View Log

46
Using Sophos

• Configure Logging Menu

47
Using Sophos

• Configuration Menu

48
Using Sophos

• Auto Update Menu

49
Sophos Windows ModuleTroubleshooting and Gotchas

• What are the common troubleshooting techniques
  and Gotchas?

50
Sophos Windows ModuleTroubleshooting and Gotchas

• Must Uninstall all other Anti-virus Applications
• Symantec uninstall is not good enough

51
Troubleshooting

• View logs
• Reboot

52
Coming SoonSophos Version 6.x

• New version has a range of new technologies,
  including Dynamic Code Analysis, pattern
  matching, emulation and heuristics, automatically
  check for malicious code.
• Behavioral Genotype Protection blocks malicious
  code before it executes. Sophos behavioral rule
  sets are constantly validated against an
  extensive library of legitimate applications,
  minimizing the risk of false positives.

53
Coming SoonSophos Version 6.x

• Same look and feel

54
Coming SoonSophos Version 6.x

• New version has smaller memory footprint.
• Runs better on older platforms (256M of memory
  for example

55
Coming SoonSophos Version 6.x

• Support for Vista and other 64 bit operating
  systems