If you want to use Sophos Central to manage Mac endpoints that are already encrypted with FileVault, you need to apply a Sophos Central Device Encryption policy to these endpoints. Note If you are using FileVault with SafeGuard Enterprise, you must uninstall the Sophos SafeGuard Device Encryption software first. Before users can start. To set up Apple VPP, upload the sToken(service token) of your Apple VPP account to Sophos Mobileand configure app assignment settings. On the menu sidebar, under SETTINGS, click Setup Apple setup, and then click the Apple VPPtab. Click the Apple iTunes VPP Portallink. This opens the Apple VPP web portal in a new browser window. This article is linked from the Sophos Endpoint Self Help (ESH) tool and provides information and troubleshooting steps for the Services page. Sophos Endpoint Self Help for Mac OS: Homepage; To perform the troubleshooting steps in this article: Sophos Tamper Protection must be disabled, or password is known.
At a Glance
Expert’s Rating
Pros
- Detection of ransomware in progress
- Low price per computer
- Cloud-based remote configuration
Sophos Macbook Air M1
Cons
- Bug in current version that requires repetitive log in to view activity history
Our Verdict
Sophos Home Premium has the most extensive and up-to-date approach to fighting malware at an unbeatable price.
Sophos released its latest version of what it simply calls Sophos Home (free) and Sophos Home Premium (paid) just before we began testing, and as such it may have a leg up on competitors that have revisions in progress. As it stands, the set of features, cloud-based configuration, and price make it the outstanding entrant in the field.
On its anti-virus performance, it’s not perfect, but it’s close. AV-TEST found it detected 98.4 percent of macOS malware, over 95 percent of macOS PUA, and over 99 percent of Windows malware. Those scores could be marginally better, but these databases are constantly being updated. During our real-world tests, it knocked out macOS malware as soon as it was unzipped from an encrypted archive. It also prevented us from loading web pages with malicious software via the WICAR test site.
Note: This review is part of our best antivirus roundup. Go there for details about competing products and how we tested them.
Sophos doesn’t have a full standalone app to manage its operation. Rather, you use the cloud-based Web app in a browser to handle configuration, operation, and remote management of other systems. Sophos appears in macOS as just a system menu item with a few options, such as the ability to perform a manual scan. Because the software protects a system in real time, the scan function is needed only if protection is otherwise paused.
The cloud-based approach allows Sophos to push updates to its interface without requiring a user download, and it has the most robust remote management of any of the software packages we tested. Only Sophos seems to put all controls in the cloud, while other AV software that offer Web-based controls have just a subset, such as initiating a remote scan.
Sophos markets this as a way to help family members, especially ones not at the same address. That’s apparent both from the licensing, with a $50 a year fee covering up to 10 computers (Mac and PC), and from how the license owner can send a link for another person to install and join the family group without additional steps for setup. Then the administrator can configure and run scans remotely.
As one of only two companies offering ransomware-specific file monitoring, Sophos rises to the top with a proviso: We were unable to independently test the feature separately, although we had it demonstrated for us by the company and examined said demo in-depth. (More on that in a moment.) That’s because Apple’s silent XProtect feature has definitions for all known ransomware, blocking it from running. XProtect uses virus signatures, so cannot protect against new ransomware malware or variants, but will block anything already discovered.
The demo Sophos showed us used an in-house ransomware test package developed by its research side. We examined script on our own, and it’s straightforward—we didn’t find any weird gotchas or wired demos in it. As the demonstration virus infected files, the originals were retained and not deleted, and by the time three files had been hit, Sophos Home Premium halted the attack and alerted the user. It’s possible to have legitimate software that encrypts or modifies a set of files, and thus the software provides an alert and won’t allow the putative file to delete documents.
Sophos Home also includes outbound network blocking to known malicious servers, malicious website blocking, web filtering for parental control, and alerts for mic and webcam usage. Sophos handles the web and network stuff via its kernel extension, which examines all traffic and allows central management of options.
The bottom line
Sophos Home Premium is the best in show, providing effective malware protection, PUA protection, ransomware monitoring, and additional features that often require separately licensed software. Its cloud-based configuration and generous licensing makes it possible to protect a household and an extended family, giving it an edge over its nearest competition.
Sophos Antivirus Download Mac
If you’re considering Sophos’ free version, it’s quite good but lacks enough of the Premium version’s features that we recommend the free version of Avast Security instead.
Sophos Macbook M1
Version tested: 2.0.2
Is Sophos Any Good For Mac
Editor’s note: Updated 4/20/2018 to clarify how we evaluated the performance of Sophos’s ransomeware detection.