Sophos anti-virus (savdid)

Halon provides a malware detection add-on to Halon Protect from Sophos. Unlike other anti-virus solutions, it is designed specifically for in-transit email filtering. For more information, please see the Features section.

This is the documentation for the Sophos anti-virus add-on option. The package consists of one service called savdid which can be used to scan messages for viruses.

Table of contents

• 1. Features
  • 1.1. Behavioral Genotype
  • 1.2. QR code protection (Quishing)
  • 1.3. Context Mail (CXMail)
  • 1.4. Sophos Live Protection
  • 1.5. Optimized performance
  • 1.6. True File Type (TFT)
  • 1.7. Solution components
    • 1.7.1. savdid daemon
    • 1.7.2. Halon Protect module
    • 1.7.3. Sophos definition mirror hosted by Halon
    • 1.7.4. Sophos datacenter lookup
• 2. Installation
  • 2.1. Prerequisites
  • 2.2. Distributions
    • 2.2.1. Ubuntu
    • 2.2.2. RHEL
  • 2.3. Startup
  • 2.4. Docker & K8s
• 3. Upgrade
• 4. Configuration
  • 4.1. Protocol directives
  • 4.2. Global directives
• 5. Update virus definitions
• 6. Integration