Central configuration of alternate data stream scanning

You can set up scanning of alternate data streams centrally, using the command line tools ExportConfig.exe and ConfigCID.exe. By default, enhanced alternate data stream scanning is 'off'.

What to do

1. Export the configuration file

Use ExportConfig.exe to export your current Sophos Anti-Virus configuration as the file savconf.xml.

2. Edit the configuration file

1. Open savconf.xml in Notepad.
2. In the menu bar, select 'Format' and disable 'Word Wrap'.
3. Scroll down to the bottom of the file.
4. Immediately above the tag '</config>', copy and paste in the following text. Do not insert line breaks.
   
<inst:install xmlns:inst="http://www.sophos.com/SAVXP/SavInstallConfiguration" xmlns="http://www.sophos.com/SAVXP/SavInstallConfiguration">
<!-- Custom settings for onDemand scanner (optional) -->
<onDemand>
<!-- Scanning Alternate Data Streams (ADS) - optional -->
<scanADS>true</scanADS>
</onDemand>
</inst:install>

5. Save the file savconf.xml.

If you also want to set up central configuration of on-access scanning of remote files, or SNMP messaging, you should place the <onDemand> section of savconf.xml below </alerting> and </onAccess>, but above </inst:install>. All edited parts of the file should be between the two 'inst:install' tags.

3. Implementing the changes

Use ConfigCID.exe to implement the changes you have made.