Avira (no Cloud)

[Yufei Labbe]

Iwas going to mention this in the RC1 thread but it is not really firmware related. Before Sophos got into the UTM business, I had always thought of them as an AV company but mostly for Macs. I have noticed an alarming trend lately, Avira catches more viruses than Sophos, however sophos is the recommended engine in XG and UTM9 (due to PUA detection) and sandstorm functionality.

I got a couple of random files from virustotal and tried them on UTM9 and sophos XG v16.0.5... In both cases sophos passes the virus. Sad part is that even windows defender catches these files as Trojan:Win32/Spursint.F!cl[:(]

Great answer as always Luk, dual scan makes the surfing speed a little slower so I do like you and use sophos endpoints with avira on the gateway. I am not trying to point out the shortcomings of Sophos because like you said, threats appear so fast these days that protection in layers is the best protection. I am sure there are viruses that are in Sophos database that avira is not aware of.

I know this is an old thread but I too would like to know what the users around here do in regards to single/dual engine and which they select as default? Right now I have single engine scanning on, and the engine set to Sophos, but I am starting to feel more and more that having dual engine scanning is worth a small tradeoff in speed.

3a8082e126