Do NOT automatically clean up malware AND extend it for pua and InterceptX
If the function "Automatically clean up malware" is DEACTIVATED, malware or pua continues to get quarantained.
As support explains, this is because this function is only for the "classic" antivirus part of the product. The deep learning part InterceptX does not care about this in addition for pua's.
But in the rollout phase, it is important that the scanner can be set to "report only" to determine company programs or tools of the company/customer which would be blocked/deleted/quarantined by Sophos Endpoint AntiVirus AND InterceptX.
In addition, pua's are also quarantined without such function, regardless if the option in beginning of this thread is active or not.
I think this should be a great feature for future.