+ Post New Thread
Results 1 to 7 of 7
Mac Thread, Sophos for Mac in Technical; Is anyone using Sophos on their Mac network, and using the Update Manager on a server to bring down the ...
  1. #1
    rolfea's Avatar
    Join Date
    Nov 2008
    Location
    Hereford
    Posts
    682
    Thank Post
    66
    Thanked 50 Times in 25 Posts
    Rep Power
    21

    Sophos for Mac

    Is anyone using Sophos on their Mac network, and using the Update Manager on a server to bring down the updates onto the network update clients from a share?

    I've set our server to download the updates, then the client to update from the server. However for this to happen Staff, and technically students, have to have read and write permissions to the network share on the server that the updates are downloaded to, therefore they could potentially delete or damage any of these files. And, to me, there isn't an obvious way round this. If they are set to read only, the update on the client fails.

    Also, now having problems getting updates to download to the server. It worked last week, came in today and it's stopped working. Not happy with Sophos so far.

    Has anyone managed to get this working and secure?
    Or using another Anti Virus on their mac network?

  2. #2

    Join Date
    May 2008
    Posts
    213
    Thank Post
    2
    Thanked 27 Times in 27 Posts
    Rep Power
    17
    We use sophos on our macs, but just the standalone version.

    With regard to your problem, you could have the 'real' AV files copied to another location (every 30 minutes?) which you could then share so the R/W privs would never permanently stop AV updates occuring.

  3. #3
    rolfea's Avatar
    Join Date
    Nov 2008
    Location
    Hereford
    Posts
    682
    Thank Post
    66
    Thanked 50 Times in 25 Posts
    Rep Power
    21
    Quote Originally Posted by nicklec View Post
    With regard to your problem, you could have the 'real' AV files copied to another location (every 30 minutes?) which you could then share so the R/W privs would never permanently stop AV updates occuring.
    Not quite sure what you mean, could you explain abit more?

  4. #4

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    If you're installing Sophos from the Enterprise Console, by highlighting a group of machines you then specify a username and password to install Sophos. This shouldn't require the end user to have write permissions, only administrators. This is deploying to Windows machines.

    I had a look at the InterChk share on one of my servers and it's just authenticated users who have read/execute access rights. Do Sophos specify that deploying to Macs requires read/write access for all users?

  5. #5

    Join Date
    May 2008
    Posts
    213
    Thank Post
    2
    Thanked 27 Times in 27 Posts
    Rep Power
    17
    Quote Originally Posted by rolfea View Post
    Not quite sure what you mean, could you explain abit more?
    A workaround (to your original statement) would be have say /sophosdefs where the server app downloads your definition files to, then setup a task to 'sync' that directory to /sophosshare - and then share that location with whatever privs - if someone was to connect to that share and delete anything, then they would be restored as soon as the sync runs again.

  6. #6
    rolfea's Avatar
    Join Date
    Nov 2008
    Location
    Hereford
    Posts
    682
    Thank Post
    66
    Thanked 50 Times in 25 Posts
    Rep Power
    21
    I know what you mean, this should work.

    I'll set the permission as read/write to everyone and see how that goes.


    Have you had any problems with the proxy settings, or general updating from the internet on the central server point? this is either from the update manager or the Sophos Anti Virus.
    Still can't get this to work for some reason, just says it can't find the server.

  7. #7

    Join Date
    May 2008
    Posts
    213
    Thank Post
    2
    Thanked 27 Times in 27 Posts
    Rep Power
    17
    For us (LGfL) we can access the update server from the LGfL WAN with no credentials, from outside the LGfL WAN you need a user to update defs - don't know if that is relevant to you but 'inside' the WAN uses a proxy server and 'outside' doesn't. Both work fine.

SHARE:
+ Post New Thread

Similar Threads

  1. Mac Update Service (WSUS 4 MAC)
    By nathanlivesey in forum Mac
    Replies: 21
    Last Post: 14th October 2009, 10:18 PM
  2. Running Mac OSX virtually on a mac
    By rolfea in forum Mac
    Replies: 11
    Last Post: 22nd May 2009, 04:19 PM
  3. Sophos
    By andy in forum Mac
    Replies: 2
    Last Post: 13th February 2006, 04:05 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •