Server 2016 and Sophos enterprise

[GuyJD]

I couldn't get the Networking on one of my 2012R2 DC's to start working again so I took the opportunity to start fresh with it and install 2016, everything is working well other than Sophos enterprise console or to be more specific the endpoint on the 2016 DC.

 

I'm getting the error message saying "Could not find a source for updated packages" so the definitions are not updating. My 2012R2 DC and Windows 10 clients are updating fine from the Subscriptions share but the 2016 DC won't update from the same folder.

 

It seems to me that the endpoint thinks it need a different update package but it shouldn't, is anyone else running enterprise console on a 2016 Server and is it working correctly?

[thatley]

Hi GuyJD,

 

Yes I had this problem too. Sophos do not support Server 2016 yet, but there is a workaround for the time being.

 

You need to install SOPHOS antivirus manually after you've installed and configured the Enterprise Console. In an explorer windows install from:

\\'yourservername'\SophosUpdate\CIDs\S000\SAVSCFXP

 

Once this is complete, in the Enterprise Console you can move the server once detected into the container you need which has the update/AV Hips policies attached.

 

This was using Enterprise Console 5.4 by the way.

 

Hope this helps.

Edited January 18, 2017 by thatley

[GuyJD]

Thanks that seems to have worked, not sure why I didn't think to try that as it's my go to fix when I'm having issues with windows 10 clients.

[thatley]

No worries, glad it worked.

 

I'll bear that in mind when we move to Windows 10, but we use a deployment script pointing to that location rather than relying on EC to auto deploy. Hoping this just works as it does on Windows 7.

[mtillbrook]

why are Sophos always behind the times with this type of thing? Its always worth checking with new OS's that Sophos is happy with them - they are always behind on thier compatibilities!

[thatley]

Hi all,

 

Not sure if any of you know, but Enterprise Console v5.5 was released a couple of weeks ago and now supports Server 2016. I have installed it on two different DC's in different schools and everything seems to work as it should.

 

The only thing I came up against was the AV & Hips policy on the server and clients would report in the console as "differs from policy" (even though every setting applied perfectly). First I thought it was something in the Firewall, but I disproved that. Eventually discovered that if you disable 'Sophos Live Protection' in the policy, it reports as 'differs from policy'.

 

Not sure about any of you, but I was advised quite a while ago by a network engineer to disable this as it creates a lot of traffic and any frame limiters that may be on your physical firewalls will throttle your bandwidth (which was the case in my office!) I am very sceptical about this and any advice would be helpful ??

 

For now, I've enabled Sophos Live Protection on both the clients and the servers. All seems ok.

 

Hope this helps anyone who has seen these results.

[GuyJD]

I'm planning on upgrading to 5.5 next week, I'll let you know how mine goes once done.

[thatley]

Good luck - it seemed as straight forward as previous versions. You're now able to drag the server onto the container to get antivirus installed, rather than manually having to install from the \\'yourservername'\SophosUpdate\CIDs\S000\SAVSCFXP share. Note: it will briefly say "Error" for a few seconds, but wait 30 seconds or so and it clears and installs fine.

[GuyJD]

Went very smoothly for me, not a single error but I think that's because I already had live protection enabled.

[thatley]

Good News GuyJD, glad it went well.

 

Thanks for the update