/
Sophos Installation Instructions

Sophos Installation Instructions

Owned by Dennis H. Wiedeman
Last updated: Nov 28, 2012

There are two methods to install a managed system onto the Sophos Enterprise Console.  One uses "push" technology to push the installation out to the client computer.  The other uses "pull" technology that is initiated from the client computer to "pull" the installation down from the Enterprise Console.

  1. Push -- The method assumes you can discover the client computer from the Enterprise Console.  It also assumes that all the Minimum Requirements for Installationhave been met on the client system.  Sophos Technical Support does not recommend this approach for large numbers of installations, in that, it puts a considerable strain on the Enterprise Console.  But, it can be recommended for one or a few installations at a time.  To install using "push", do the following from the Enterprise Console:
    1. Find New Computers -- You can do this from IP Address, Host Names, or Import from Active Directory.  Finding by IP Address seems to be the most straight-forward approach.  Importing from Active Directory can give you results, but there may be a lot of "stale" information in Active Directory that you may have to cull through in order to get to just the systems that are active.
    2. <Right Click> on the Computer in the Console / Select 'Protect Computers' -- You can highlight any number of client systems in the Enterprise Console window, and <Right Click> to protect all the computers selected
  2. Pull -- This approach is more labor intensive, in that, you have to initiate it from each client computer, usually from a remote desktop session on those computers.  Certain Minimum Requirements for Installation have to be met, but when you remote to a system as an administrator, it seems the process is a bit more forgiving than trying it from a "push".  You can use the following command line in order to "pull" the installation down from the Enterprise Console:

Version 10.0 -- Sophos Anti-Virus Command Line

\\SOPHOS0.ad.uci.edu\SophosUpdate\CIDs\S000\SAVSCFXP\Setup.exe -updp "http://SOPHOS0.ad.uci.edu/SophosUpdate/CIDs/S000/SAVSCFXP" -mng yes -crt R

NOTE: The 10.0 version of the Sophos command line is good for use on 32-bit and 64-bit systems.

Use of these command lines, or the "push" process that attempts to locate the client systems should result in systems being added to the "Unassigned" group in the Enterprise Coonsole.  From there, you select, drag and drop an unassigned system into the appropriate group under "Global Group" that indicates the day(s) and time(s) at which you would like virus scans to take place. 

The Global Group is broken up into two major parts -- Servers and Workstations.  Under each of those categories, the sub-groups are broken up by time and days.  Just drag and drop an Unassigned systems into one of the time/day based scanning sub-groups.

More often than not, the Desktop Support group will be adding new desktop computers and laptops to be managed under the Enterprise Console and the Windows Services Group will be adding the servers to the Enterprise Console, but this document roughly outlines the installation process to get unmanaged, unassigned systems into the Sophos Enterprise Console for further management.

NOTE: During a "Pull" Installation --  The installation command line will initiate the installation.  When the installation windows disappear, the person installing the program may mistake the installation to be complete and log out.  However, if you <Right Click> on the Sophos shield icon in the System Tray, you will notice an option, View Updating Status.  If you select that option, you can observe the rest of the installation, which will take about 2 more minutes before you can logout.

test\