+ Post New Thread
Results 1 to 13 of 13
Windows Thread, Deploying Sophos in Technical; Trying to move Sophos to a new server, using Enterprise Console 3 & Anti Virus 7. I know they arnt ...
  1. #1

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,962
    Thank Post
    159
    Thanked 152 Times in 116 Posts
    Rep Power
    49

    Deploying Sophos

    Trying to move Sophos to a new server, using Enterprise Console 3 & Anti Virus 7. I know they arnt the latest versions but they are the latest available from our LEA.

    Deploying to desktops via the console is fine, because I know they're likely to be on during the day. However laptops is a different story.

    There seems to be an option for adding new computers as they are created, but not one for installing on a machine as it comes online?

    We used to use a simple startup script which checked for the existance of Sophos on a client, and if not found it would install it from the InterChk share on the server. But this method, although giving the client a working Sophos install, which updated from the right place, does not make it appear in the enterprise console.

    Any ideas?

  2. #2
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,403
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78
    There is a method to force the sophos install from that location to register with the console too ..

    give me a couple of minutes and I'll dig it out!

  3. #3
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,403
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78
    Ah ha! that was faster than I thought I'd find it!

    Code:
    ::Install Sophos
    ECHO Install Sophos from Server
    "\\SERVERNAME\InterChk\ESXP\Setup.exe" -updp "\\SERVERNAME\InterChk\ESXP" -user "emanager" -pwd "EMANAGERPWD" -mng yes
    I have that in a BAT file that does the work.


  4. Thanks to soveryapt from:

    projector1 (10th August 2010)

  5. #4

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,962
    Thank Post
    159
    Thanked 152 Times in 116 Posts
    Rep Power
    49
    That works (it looks similar to what we used to use) but it will not appear in the console for some reason
    Same as before.

    Ive waited an hour or so and the computer I tested it on is still just showing as grey in the console

  6. #5


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,619
    Thank Post
    229
    Thanked 860 Times in 738 Posts
    Rep Power
    297
    Quote Originally Posted by sidewinder View Post
    That works (it looks similar to what we used to use) but it will not appear in the console for some reason
    Same as before.

    Ive waited an hour or so and the computer I tested it on is still just showing as grey in the console
    have you tried syncing sophos with ad then any ad computer accounts should show in sophos

  7. #6
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,403
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78
    Quote Originally Posted by sidewinder View Post
    That works (it looks similar to what we used to use) but it will not appear in the console for some reason
    Same as before.

    Ive waited an hour or so and the computer I tested it on is still just showing as grey in the console
    All I can suggest there is to double check your emanager passwords (make sure that you've got the right password and even account if you don't use the emanager set up as I do)

  8. #7
    mrtechsystems's Avatar
    Join Date
    Jun 2005
    Location
    Yorkshire
    Posts
    424
    Thank Post
    99
    Thanked 22 Times in 22 Posts
    Rep Power
    25
    Also just to add aswell have you tried looking in the event log aswell to see if the password or the sharename is incorrect

  9. #8

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,962
    Thank Post
    159
    Thanked 152 Times in 116 Posts
    Rep Power
    49
    I know the password is right - its the same username/password I use to protect computers manually in the console. Also, if it wasnt right, the application wouldnt install surely?

    sted - yeah Ive done the sync, but it just shows all computers greyed out (ie not having sophos installed) until i protect them

  10. #9
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,403
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78
    Quote Originally Posted by sidewinder View Post
    I know the password is right - its the same username/password I use to protect computers manually in the console. Also, if it wasnt right, the application wouldnt install surely?
    It would still install, it just wouldn't connect to the console correctly as that last bit of the script is the console element of it. It may fall over, but on mine when I got the password wrong it still installed it (I put the password in for another school .. DOH!)

    Erm, I can't think of what else it could be.. Try giving the Sophos Knowledge Base a search, it's helped me out in the past..

  11. #10

    Join Date
    Mar 2008
    Location
    Doncaster
    Posts
    11
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Have you tried going to the computer in question and running the setup from the shared INTERCHK folder? I've had to do that on a few machines for it to register in Enterprise Console.

  12. #11

    Join Date
    Apr 2008
    Location
    Keighley, West Yorks
    Posts
    339
    Thank Post
    52
    Thanked 51 Times in 45 Posts
    Rep Power
    22
    Quote Originally Posted by sidewinder View Post
    Ive waited an hour or so and the computer I tested it on is still just showing as grey in the console
    Have you rebooted the client since you installed it? My colleague has dealt with all the deployment of our new version here when we moved to another server, and I think he said they don't show up until a reboot?

    Peter

  13. #12
    BatchFile's Avatar
    Join Date
    Aug 2007
    Location
    Cumbria
    Posts
    948
    Thank Post
    544
    Thanked 128 Times in 106 Posts
    Rep Power
    60
    Having a problem deploying the new Sophos automatically...

    Due to a bitter experience a couple of christmas's ago, we try to run with Windows firewalls up on as many workstations as possible, with exceptions configured by GPO for programs that need it, such as ABTutor and Sophos. This worked fine; I've got a startup script (via another GPO) that installs SAV in managed mode if it's not already on the machine, the machines then appear in the management console (V2) in the unassigned group - but even if they stay there they update fine. I've just set up the new management console on a new server and changed the script to install from the new server. The workstations get the new Endpoint Security software and update fine, but don't appear anywhere in the new management console.

    For the old version of Sophos, I opened ports 8192,8193 and 8194 to the IP of the management server - I've since opened them to the new server too, but even with the firewall off completely they still don't appear so it's not just that. I can't deploy automatically from the console either as the security on c:\windows\tasks is set to everyone:read (another virus prevention measure that I'm reluctant to remove).

    Any ideas how I get the workstations to appear in the new console without blowing holes in security?

  14. #13

    Join Date
    Apr 2010
    Location
    Bradford
    Posts
    69
    Thank Post
    9
    Thanked 5 Times in 5 Posts
    Rep Power
    9
    To sort of follow on, hope I'm not hijacking, I'm too having problems with the migration, well I eventually got to update the Enterprise console to 4.5 after copying the policies manually to the \\Server\Sophos update\ dir but When I try updating the endpoints through the EC, the endpoint looks to download the update, restarts its self but stays at version 7 something or other. The EC then says its same as policy?

    Does Endpoint 9 (or is it 9.5) come apart of the Enterprise package and if so, where do I find it/ point the update managers to it? (if thats what I think is the probable trouble cause, I've looked in the legacy update policy but only has Endpoint Ver 8 available to subscribe too).

SHARE:
+ Post New Thread

Similar Threads

  1. Deploying the O/S
    By 01hanstu in forum O/S Deployment
    Replies: 5
    Last Post: 11th December 2009, 03:06 PM
  2. Deploying Sophos on OS X
    By sidewinder in forum Mac
    Replies: 4
    Last Post: 5th October 2008, 04:53 PM
  3. Deploying Sophos via wireless
    By KarlGoddard in forum Windows
    Replies: 2
    Last Post: 19th May 2008, 09:31 AM
  4. Deploying Fonts
    By HodgeHi in forum Wireless Networks
    Replies: 7
    Last Post: 22nd April 2008, 11:10 AM
  5. Timeout settings when deploying Sophos
    By KarlGoddard in forum Windows
    Replies: 0
    Last Post: 9th January 2008, 09:26 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •