SAV: scan before files are written to disk
Our customer asked if can implement a scan that scans files before they are written to the disk, so that files are intercepted before they can do any harm.
Frank Soldner commented
You can see this behaviour at Trendmicro Officescan. I never saw a malicious file at the destinations storage after trying to copy it from the source system. Sophos however saves the file completely to the disk before a scan is initiated to it. If I've choosen to block access to this file, the file remains on the targets storage. In my opinion this is a behaviour I a security risk because we have servers where a AV software is unwanted and not recommanded from the manufacturer.