Hey Folks, what to you all think about Sophos as a...
# _general
j
Hey Folks, what to you all think about Sophos as an AV for non-persistent/PVS and persistent /MCS workload? Thanks
a
It's a heavy AV, but runs well when you tune it with the recommended exclusions and tweak your settings from there: https://community.citrix.com/tech-zone/build/tech-papers/antivirus-best-practices/#wiki-header-5
🙌 1
👍 1
j
If you are looking at AV solutions, I like just running Windows Defender. For non-persistent you can setup offload to a share for super light AV protection. https://www.jeffriechers.com/wiki/vdi-defender-offloading/
👍 1
j
Thanks Guys! If it works with the correct conf, that's something good. We ran Defender for a while but the lack of centralized reporting is a pity. How did you address that? WEF? Also we had a nasty issue with one of our business apps, we got the app crashing even excluded, we spent hours to fix, we couldn't :/
c
I'm forced to use it for a Horizon non-persistent solution. Not a fan, it's really had a heavy impact on performance. In the early stages of the solution, I had sole use of of an AFA HPE Primera and HPE Synergy hosts...didn't really matter what I gave the VMs - once Sophos was installed perfomance was on average 110% worse across any stats we took. I am just about to delegate some work to try and tweak the policies to see can I claw back some performance but I don't think it'll be meaningful. I dont want to come across to negative, as I think there are good/great features but overall I think it's creates too much load/overhead and I am not a fan as a result.
j
Thank you @CMonty for your honest feedback!