Sophos Clean: Partner Frequently Asked Questions. Date: May May 2016 Page 1 of 6

Transcription

1 Sophos Clean: Partner Frequently Asked Questions Date: May 2016 May 2016 Page 1 of 6

2 Target Customers 1. What does the ideal customer look like? 2. Are we targeting existing Sophos Endpoint customers? Licensing 1. What stops a someone repeating their free 30-day trial? 2. Can we monitor license usage by a customer? 3. Is Sophos Clean licensed per user or per machine? 4. Is Sophos Clean intended for home use? 5. Will the output of Project Spectrum include Sophos Clean? 6. What s to stop someone downloading Clean, using it to clean up their malware and then removing it, without paying? 7. What happens when the subscription expires? Product and Competitive 1. How does Sophos Clean compare to Sophos Virus Removal Tool? 2. What is the difference between Sophos Clean and Sophos Endpoint? 3. How does Sophos Clean compare to Malwarebytes Breach Remediation 4. Is Sophos Clean managed by Sophos Central? 5. Can Sophos Clean deployment be automated? 6. Can Sophos Clean by run automatically? 7. Can I run Sophos Clean from a recovery environment? 8. What should I do if a Sophos Endpoint customer runs clean and finds something nasty? Detection 1. What does Sophos Clean look at on the machine? 2. Will Sophos Clean find a Potentially Unwanted Application (PUA)? 3. What about Rootkits? May 2016 Page 2 of 6

3 Target Customers 1. What does the ideal customer look like? a) Companies who have a malware infection. These companies can download and use the product free for 30-days to alleviate their immediate problem. They may choose to buy the software to continue use after that time to provide additional confidence that their problem has been resolved and they haven t experienced a secondary infection. b) Companies not using Sophos Endpoint who would like a second opinion on how their current endpoint security is working. They may download the product and use it for free for 30-days to see what their current endpoint security may have missed. This may help setup a future sales opportunity to displace their current endpoint security with Sophos Endpoint. 2. Are we targeting existing Sophos Endpoint customers? Not directly, but they may choose to purchase it now if they wish. Existing customers can download Clean for a free 30-day trial. Later in 2016 we will be releasing additional upgrade SKU s for Sophos Cloud Endpoint that will include the functionality of Clean built in to their Endpoint. Those new SKU s will have additional functionality so you may prefer to save the upgrade conversation until they are available. Licensing 1. What stops a someone repeating their free 30-day trial? Sophos Clean will maintain the trial status locally on the machine and the trial activation is shared with Sophos, thus will know once the trail period has expired. 2. Can we monitor license usage by a customer? Customers license key and a machine identifier are shared with Sophos so we can check for potential license abuse. 3. Is Sophos Clean licensed per user or per machine? Per user, in the same way Endpoint Protection is licensed. In theory a user could have multiple machines. We won t stop license activation on multiple machines, but will periodically check our activation reports to check for abuse. 4. Is Sophos Clean intended for home use? No. It can only be purchased in a minimum of 5 user licences to aim it solely at the business space. HitmanPro continues to be available from Surfright for consumers. 5. Will the output of Project Spectrum include Sophos Clean? Yes. The expected Endpoint Ultimate sku and Sophos Intercept are likely to include Sophos Clean functionality to aid remediation. May 2016 Page 3 of 6

4 6. What s to stop someone downloading Clean, using it to clean up their malware and then removing it, without paying? Nothing. We want people who are experiencing malware problems to come to Sophos for help. If they only use Clean to help them out of a problem, that s a positive brand impression for Sophos. 7. What happens when the subscription expires? Sophos Clean reverts to detection only until a valid subscription license is entered. Licenses can be applied automatically using command line parameters. May 2016 Page 4 of 6

5 Product and Competitive 1. How does Sophos Clean compare to Sophos Virus Removal Tool? Sophos Clean uniquely examines the whole system not only removing malware, but also removing the traces left behind on your system, such as other files and registry keys. 2. What is the difference between Sophos Clean and Sophos Endpoint? Sophos Endpoint is designed to run continuously protecting against and detecting potential threats on the machine. Sophos Clean is run on demand, when needed, to clean up after an incident. 3. How does Sophos Clean compare to Malwarebytes Breach Remediation MalwareBytes offer exploit prevention and breach remediation products. Sophos Clean directly competes against the Breach Remediation product (not the exploit prevention). The latest MRG Effitas report showed how HitmanPro outperforms MalwareBytes, Sophos Clean is built upon HitmanPro technology. Assessment-Q pdf 4. Is Sophos Clean managed by Sophos Central? No. Sophos Clean is a standalone independent tool. 5. Can Sophos Clean deployment be automated? Yes, the executable file is only 11mb making it perfect for remote deployment. It can be simply pushed out using many remote software deployment tools and its own set of command line parameters 6. Can Sophos Clean by run automatically? Yes. Sophos Clean can be configured to run on a schedule. It also has an extensible command line interface allowing it to be remotely executed by system management tools as required. 7. Can I run Sophos Clean from a recovery environment? Sophos Clean can be used from the WinPE variants of the supported operating systems. An internet connection is required 8. What should I do if a Sophos Endpoint customer runs clean and finds something nasty? Help the customer understand the difference between the two products. Endpoint is offering Protection from threats, Clean is looking for what a threat may have done. Depending on when Endpoint was installed and how it was configured it s quite possible the remains predate the deployment or exist due to poor configuration. Clean will also find many undesirables like tracing cookies that are picked up during your daily browsing. If you have a particular case you want to investigate, please work with support. May 2016 Page 5 of 6

6 Detection 1. What does Sophos Clean look at on the machine? Browser cookies, files, registry, running processes and any traces of malware that has previously been attempted to remove. 2. Will Sophos Clean find a Potentially Unwanted Application (PUA)? Yes 3. What about Rootkits? Rootkits are detected, you may require a reboot to remove them. May 2016 Page 6 of 6