E2 Sophos Ai/ML

[secronis]

Did CP integrate the full Sophos SDK? Is their ML engine included as like Kaspersky is?

[PhoneBoy]

I believe the only thing a third party engine is used for is static file analysis.

[secronis]

The included Kaspersky SDK has runtime ML enabled thru it's PDM named detections. Those are static and dynamic models. 

In the case of Sophos... ML-PE & ML-PUA is their local deep learning static model. 

Back to the question. Is the full Sophos SDK integrated into CP? Thanks. We are well aware of all the engines on the market.

[PhoneBoy]

It may be/have been integrated, but support for it is a separate question.
I recommend reaching out to your local Check Point office to discuss your precise requirements.

[G_W_Albrecht]

According to my in-depth CP TP trainings, only a hash is sent by AV to compare with the Kaspersky AV database as a first TP step. Afaik ABOT, URLF and APCL use no Kaspersky engines - surely IPS, TE and TX do not.