Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/support/surf/en-us/index.html?contextId=sf-low-firewall-rules-sandstorm

Firewall rules configured to send PEs to Sandstorm

Low

Explanation

Zero-day protection increases the possibility of identifying unknown viruses that the signature-based antivirus engine might miss.

Resolution

  1. Go to PROTECT > Rules and policies > Firewall rules.
  2. Open or create your rule.
  3. Go to Security features > Web filtering.

  4. Select the following under Malware and content scanning:

    • Scan HTTP and decrypted HTTPS
    • Use zero-day protection
    • Scan FTP for malware

  5. Click Save.

  6. Go to MONITOR & ANALYZE > Zero-day protection > Protection settings.
  7. Remove any excluded file types.
  8. Click Apply.