Managing Sonar; Chapter 13 Managing Sonar; About Sonar - Symantec 20032623 - Endpoint Protection Small Business Edition Implementation Manual

Managing SONAR

This chapter includes the following topics:

About SONAR

SONAR is a real-time protection that detects potentially malicious applications
when they run on your computers. SONAR provides "zero-day" protection because
it detects threats before traditional virus and spyware detection definitions have
been created to address the threats.
SONAR uses heuristics as well as reputation data to detect emerging and unknown
threats. SONAR provides an additional level of protection on your client computers
and complement your existing Virus and Spyware Protection, intrusion prevention,
and firewall protection.
Legacy clients do not support SONAR; however, legacy clients use TruScan
proactive threat scans to provide protection against zero-day threats. TruScan
proactive threat scans run periodically rather than in real time.
Note: Auto-Protect also uses a type of heuristic that is called Bloodhound to detect
suspicious behavior in files.
See
About SONAR
About the files and applications that SONAR detects
Managing SONAR
Monitoring SONAR detection results to check for false positives
Enabling or disabling SONAR
Managing SONAR" on page 196.
Chapter
13