Potentially Unwanted Applications: overview
What is a Potentially Unwanted Application (PUA)?
Potentially Unwanted Application (PUA) is a term used to describe applications that, while not malicious, are generally considered unsuitable for business networks. The major PUA classifications are adware, dialer, non-malicious spyware, remote administration tool and hacking tool. However, certain applications that can fall into the PUA category might be considered useful by some users.
Which Sophos products include PUA detection?
Sophos Anti-Virus for Windows 2000+, version 6.0 and above provide scanning for a wide range of common adware and potentially unwanted applications (PUAs). Note that PUA scanning is not available for Windows NT/95/98/Me computers.
What is PUA scanning?
PUA scanning can detect a wide range of common adware and potentially unwanted applications (PUAs). It also provides for the cleanup of files, registry entries and in-memory processes of those applications that you do not want running on your computers.
How do I configure my computers for PUA scanning?
PUA scanning can be enabled as part of your anti-virus policies. For details of how to configure your anti-virus policies to include PUA scanning, refer to the on-line Help or the 'Configuring Scanning' section of the Sophos
How do I deploy PUA scanning across my network?
Sophos recommends deploying PUA protection in stages across your network. This will allow you the opportunity to assess the threat posed to your system, decide on appropriate action, and reduce the likelihood of disruption to users.
Refer to either of the following knowledgebase articles, for a rollout strategy that network administrators can employ:
- Sophos Endpoint Security and Control: a PUA rollout strategy
- Sophos small business solutions: a PUA rollout strategy
How do I obtain up to date protection?
The latest PUA detection is incorporated in the IDE files that provide regular updates to your anti-virus software.
Does PUA scanning automatically remove applications?
PUA scanning will inform you which applications have been found. You can then configure your Sophos
If appropriate, you can configure this on a group by group basis, so that some groups retain these applications and others have them removed.
If you need more information or guidance, then please contact technical support.
- Article ID: 14887
- Created: 24 Apr 2006
- Last updated: 7 Oct 2008
