Sophos Anti-Virus Version 7 to version 9.5

[Mick_Dundee]

Hello,

 

My company's IT is outsourced and the people that look after the server want £950 to perform the Sophos upgrade from version 7 to version 9.5.

 

Now that's fine as long as it warrants that kind of money, however - how do we know that they are not "bumping" the price up somewhat to make a bit of profit ?? Ideally I want this to roll out without any hassle, but if I can manage to do it myself, I save my company a good whack and in a world where everything is going up, we need to save where we can.

 

I have contacted Sophos and they have said to just download it from the website onto the server then the rest will run automatically. Sounds easy ?? And our IT boys want £950 ?

 

Has anyone done this upgrade and is it worth me taking it on myself ?

 

Replies appreciated.

[AlfaTech]

Don't pay someone to do it! Upgrading to Enterprise Console 4.5.1.0 (server) and Endpoint Security and Control 9.5 (client) is easy. I've recently upgraded the servers and rolled out to clients across two domains. You might have some initial teething troubles, and if you get really stuck Sophos' support is excellent, but for the most part it is a very straight forward process.

[tommccann]

speaking of this has anyone got a working silent installer login script (BAT preferable) ?

[ZeroHour]

speaking of this has anyone got a working silent installer login script (BAT preferable) ?

 

Dont do as a login tbh but I use the following switches to roll it out post build:

setup.exe -user {DOMAIN}\{ACCOUNT FOR SOPHOS SHARE} -pwd {ACCOUNT PASS} -scf -mng yes -updp \\{SERVER}\SophosUpdate\CIDs\S000\SAVSCFXP\

-scf installs the firewall as well btw.

[alexsanger]

We get Sophos lumped in with services from the LEA, so don't know if you're being charged for a license or over the odds for an engineers time to perform the update. We just downloaded the new version, installed it, checked the default policies and let it go. By the end of the day it had picked up all the PCs and we disabled legacy updating shortly after that to force the roll out of 9.5 endpoint.

 

Seems steep to me. If you can, do it yourself.

[tommccann]

Dont do as a login tbh but I use the following switches to roll it out post build:

setup.exe -user {DOMAIN}\{ACCOUNT FOR SOPHOS SHARE} -pwd {ACCOUNT PASS} -scf -mng yes -updp \\{SERVER}\SophosUpdate\CIDs\S000\SAVSCFXP\

-scf installs the firewall as well btw.

 

Still not silent for me!! grr this is annoying me now

[Mick_Dundee]

Do I need to update control centre first ?

 

I ran the upgrade advisor on the server:

 

http://i176.photobucket.com/albums/w198/Dundee_stokie/sophosupgradeadv.jpg

[Mick_Dundee]

Do I need to update control centre first ?

 

I ran the upgrade advisor on the server:

 

http://i176.photobucket.com/albums/w198/Dundee_stokie/sophosupgradeadv.jpg

[andy_b]

try:

 

 

Setup.exe -updp "\\XXXXX\SophosUpdate\CIDs\S000\SAVSCFXP" -user XXXXX -pwd XXXXXX -mng yes -s -ni

[sted]

if you are enterprise console 3.x you cant directly go to 4.5 you either need to go to 4 then 4.5 or uninstall 3 and install 4.5

[AlfaTech]

Do I need to update control centre first ?

 

I ran the upgrade advisor on the server:

 

Yep, first install Enterprise console then rollout to clients - if you need the full installation (rather than upgrade) you can get it by logging into Sophos' website and going to Support > Download and Updates.

 

Work through each of the sections on the upgrade advisor, this should be helpful Prerequisite checks performed by the Sophos Upgrade Advisor: what they mean i.e. you'll need a recent version of SQL (installed with Endpoint) , and consider using another server (not the DC), etc.

[Matt_Tate]

Dont do as a login tbh but I use the following switches to roll it out post build:

setup.exe -user {DOMAIN}\{ACCOUNT FOR SOPHOS SHARE} -pwd {ACCOUNT PASS} -scf -mng yes -updp \\{SERVER}\SophosUpdate\CIDs\S000\SAVSCFXP\

-scf installs the firewall as well btw.

 

this is the one i use - works perfectly. it scans the PC to see if an insall already exists if it does it doesit skips the install, if it doesnt it install sophos

 

@ECHO OFF
REM --- Check for an existing installation of Sophos AutoUpdate
if exist "C:\Program Files\Sophos\AutoUpdate\ALsvc.exe" goto _End
if exist "C:\Program Files (x86)\Sophos\AutoUpdate\ALSVC.exe" goto _End
REM --- Deploy to Windows 2000/XP/2003
\\servername\SophosUpdate\CIDs\S000\SAVSCFXP\Setup.exe -updp "\\servername\SophosUpdate\CIDs\S000\SAVSCFXP" -user "domainname\Sophos Username" -pwd "sophos password" -mng yes -ni -s
REM --- End of the script
Pause
:_End

 

i've also set it on some area's that need a full reinstall wehreby i just removed the "if exist" parts.

[Mick_Dundee]

I am now currently installed 4.0 on the server (note I chose to ignore the "disable simple file sharing" for all the client PCs ! hope this wont come back to bite me !

[psydii]

It may well do.

Simple File Sharing in Microsoft Windows XP, Vista, and Server 2000, 2003 and 2008

[Marci]

Well, I'm following the migration guide to migrate from Enterprise Console 3 to EC4.5 using a new server with a new identity... gets as far as sect. 6.1.4 step 10, and the Sophos Management Service fails to restart on the new server

[simpsonj]

I smashed my head against this for a long time (too many SQL servers, and it got itself confused). My advice is to not upgrade the current installation, but to install from fresh if possible, then it became a very easy install. The fact that SOPHOS has added a minute to my login times is another issue entirely!