Install Sophos for Virtual Environments confused

[Theldron]

Hi all,

 

I am trying to install Sophos for Virtual Environments with Sophos Central, I download the application and go to install it and it asks about Security VM and Host VM.

 

The Sophos installer has extracted files including Hyper-V disk images.

 

I must be missing something, as I cannot find a decent guide on what I am supposed to be doing with any of this?

 

Anyone know of a good installer guide?

 

Thanks

[Jaan]

Sophos for Virtual Environments is to be run on a hyper-v or similar to protect the VMs on that host (or cluster). It creates a VM. We decided against it and install the full fat AV client on all our VMs as;

 

A:We have a beefy S2D cluster

B: Sophos for Virtual Environments doesn't use intercept X (unless that's changed recently)

 

https://support.sophos.com/support/s/article/KB-000036517?language=en_US

 

https://www.sophos.com/en-us/medialibrary/PDFs/factsheets/sophos-virtualization-security-dsna.pdf

 

https://support.sophos.com/support/s/article/KB-000036485?language=en_US

[round2it]

yes i was confused so i just installed fat version on my vms

[MYK-IT]

Sophos for Virtual Environments is to be run on a hyper-v or similar to protect the VMs on that host (or cluster). It creates a VM. We decided against it and install the full fat AV client on all our VMs as;

 

A:We have a beefy S2D cluster

B: Sophos for Virtual Environments doesn't use intercept X (unless that's changed recently)

 

https://support.sophos.com/support/s/article/KB-000036517?language=en_US

 

https://www.sophos.com/en-us/medialibrary/PDFs/factsheets/sophos-virtualization-security-dsna.pdf

 

https://support.sophos.com/support/s/article/KB-000036485?language=en_US

 

Interesting, as that setup has been recommended by our Sophos XG supplier too (to use full-fat agent.)

 

Currently, I have all our (Hyper-V) VM's protected using the "Sophos for Virtual Environment" agents with (one per Hyper-V host) Sophos Security VMs - but realised that file/folder path exclusions, and other settings (including Intercept X) are not available or configurable for those VM servers, unlike those with the full-fat client installed.

 

However, when I look at our Sophos licencing, against Intercept X Advanced Server it is listing 'Servers' (e.g. physical) and 'Guest VMs (Sever OS)' with all our VM servers (protected with 'Sophos for Virtual Environment') listed too.

 

Might be tempted to revert to the full-fat client, as although potential increase in overheads I would then not need the 2 Sophos Security VMs

Edited July 2, 2021 by MYK-IT

[danielghares]

We're running SVE across our hyper-v environment. One SVE VM running on each host, and then the client installed on each guest VM. I followed this guide to install https://docs.sophos.com/esg/virtual-environments/1-0/help/en-us/pdf/sve_10_central_sgeng.pdf

[EduCyberKid]

As some advise, plesee don't use the VM installer unless this is absolutely essential. The reason is that it doenst include 90% of all the security features of the full endpoint protection client. You get only 2 features, virus scanning and live protection, all of the next gen and additional layers of protection are not included. This massively increases your vulnerability level.

 

If you Google the difference you will see how limited the VM installer is.

[slugshead]

Full client on everything here too. Hosts and VMs

[EduCyberKid]

Hi, sorry but there is absolutely no documentation that says Intercept X is included with the VM installer.... It says for server which it is, but only on the full phat installation

[EduCyberKid]

You are actually getting no Intercept X protection using the VM installer and only two basic features of the full endpoint too. It's like paying for a top of the range car and driving it in second gear....

[Theldron]

Thanks for all the advice, have gone for full fat install. Spent so long messing with the VM installer glad I never succeeded now.