Sophos Enterprise Solutions
This Seminar… <ul><li>Overview </li></ul><ul><ul><li>Components — EM Library, Enterprise Console, Clients </li></ul></ul><...
Overview
Components <ul><li>EM Library (essential) </li></ul><ul><ul><li>Manages downloading of software from Sophos </li></ul></ul...
Requirements — EM Library <ul><li>Windows </li></ul><ul><ul><li>Windows NT SP6a </li></ul></ul><ul><ul><li>Windows 2000 Pr...
Requirements — Enterprise Console <ul><li>Windows 2000 (SP3+) or 2003 Server </li></ul><ul><ul><li>If managing more than 1...
Function — EM Library <ul><li>Downloads package updates from Sophos to a library according to a schedule </li></ul><ul><ul...
Function — EM Library <ul><li>Pushes updates to Central Installation Directories (CIDs) </li></ul><ul><ul><li>CIDs can be ...
Function — Enterprise Console <ul><li>Deploy software to clients </li></ul><ul><li>Monitor status of client installations ...
Library maintained by EM Library Sophos Databank at sophos.com 1. EM Library pulls updates from Sophos according to schedu...
How does Enterprise Console fit in? <ul><li>Not required to provide updates to clients </li></ul><ul><li>May be used to ma...
Documentation <ul><li>Sophos enterprise solutions installation advisor </li></ul><ul><li>Sophos Anti-Virus Startup Guide <...
Questions?
EM Library
Installation <ul><li>Download required network installer from micros.oucs </li></ul><ul><li>Before installation on Domain ...
Installation <ul><li>To install EM Library only </li></ul><ul><ul><li>sec10ServerinstallerEMConsolesetup.exe </li></ul></u...
Configuring EM Library
Create Library <ul><li>Location for downloaded files from Sophos </li></ul><ul><li>Local or remote </li></ul><ul><li>Promp...
Create Library
Create network account <ul><li>Used to update library files </li></ul><ul><li>May need to use pre-created domain account o...
Create Network Account
Select Parent
Select Parent <ul><li>Source of files to download to library </li></ul><ul><li>Can be Sophos databank or another library <...
Select Parent
Schedule Downloads
Schedule Downloads <ul><li>Sets up schedule for downloading from Sophos or parent library </li></ul><ul><li>Generally set ...
Schedule Downloads
Schedule Downloads
Select Packages
Select Packages <ul><li>Default view shows only the current versions of the new Sophos clients </li></ul>
Select Packages <ul><li>Uncheck options to see more packages </li></ul>
Download Packages
Download packages <ul><li>Triggers initial download of packages to populate both library and central installation folders ...
Download Packages <ul><li>Can also be used at any time to trigger manual update of packages </li></ul>
Configuring Packages
Configuring Packages <ul><li>Subscribed </li></ul><ul><ul><li>Will be downloaded according to schedule </li></ul></ul><ul>...
Configuring Central Installations
Configuring Existing CIDs <ul><li>Can alter location of CID (e.g. to a different server) </li></ul><ul><li>Can alter crede...
Configuring Central Installations <ul><li>Right-click to configure existing CIDs </li></ul>
Add additional CIDs <ul><li>Packages/subscribed and right-click on chosen package </li></ul><ul><li>Configure options as p...
CIDs — Additional Information <ul><li>Note special requirements for CIDs for the following clients (see manuals) </li></ul...
CID Anatomy Used to check synchronisation status cidsync.upd Optional file to configure updating policy sauconf.xml Used t...
CID Anatomy <ul><li>cidsync.upd </li></ul><ul><ul><li>Clients use this to check synchronisation status </li></ul></ul><ul>...
EM Library — Tools/Options <ul><li>Console Options </li></ul><ul><ul><li>Display, refresh etc. </li></ul></ul><ul><li>Secu...
EM Library — Scripts <ul><li>serverSophosEMbinEMLexp.exe (C:Program FilesSophos Enterprise ManagerLibrarybinEMLexp.exe) </...
EM Library — Scripts <ul><li>Manual update of child library via batch file </li></ul><ul><ul><li>http://www.sophos.com/sop...
Questions?
Sophos Enterprise Console
Enterprise Console <ul><li>Install using network installers as per EM Library </li></ul><ul><li>Manage clients in a contro...
Console View
Viewing Computers <ul><li>Actions/Find Computers </li></ul><ul><ul><li>Relies on Microsoft networking (browse masters etc....
Organising Computers — Groups <ul><li>Need at least one group in order to define policies </li></ul><ul><li>Move PCs from ...
Configuring Policies <ul><li>Updating and Anti-virus policies </li></ul><ul><li>Policies may be different for each group <...
Updating Policy <ul><li>Need to specify at least </li></ul><ul><ul><li>Primary source (for updates) </li></ul></ul><ul><ul...
Updating Policy
Anti-virus policy <ul><li>E.g. scheduled and on-access scanning </li></ul>
Protect Computers — Prerequisites <ul><li>Need access to clients via file share </li></ul><ul><ul><li>XP or other personal...
Protect Computers — Wizard
Enterprise Console and Firewalls <ul><li>3 services on client (see Appendix B) </li></ul><ul><li>Using TCP 8192-8194 </li>...
Policies <ul><li>Can be applied via Enterprise Console </li></ul><ul><li>Can also be applied using files </li></ul><ul><ul...
Policies <ul><li>Export group policies from Enterprise Console using exportconfig.exe </li></ul><ul><ul><li>sec10tools or ...
Questions?
Sophos Clients
Client Installation <ul><li>Sophos AutoUpdate installed first </li></ul><ul><ul><li>Configured with source of Sophos files...
Client Components on Windows XP Enterprise Console Management Virus Detection Updating Sophos Purpose 1. Sophos Agent 2. S...
Client Configuration <ul><li>Groups created </li></ul><ul><ul><li>SophosAdministrator </li></ul></ul><ul><ul><li>SophosPow...
Group Restrictions <ul><li>Member of SophosAdministrator group </li></ul>
Group Restrictions <ul><li>Member of SophosUser group </li></ul>
Client Installation and Configuration <ul><li>To be continued… </li></ul>
Questions?
Appendix A — EM Library <ul><li>Default Shares </li></ul><ul><ul><li>C:Program FilesSophosEnterprise Managerconsolebininst...
Appendix A — EM Library <ul><li>Services created when Library is created </li></ul><ul><ul><li>Sophos EMLibUpdate Agent  <...
Appendix A — EM Library <ul><li>Users created (optional) </li></ul><ul><ul><li>EMLibUser1 (can specify alternative account...
Appendix B — Enterprise Console <ul><li>Shares created </li></ul><ul><ul><li>None known </li></ul></ul><ul><li>Services cr...
Appendix B — Enterprise Console <ul><li>Groups created </li></ul><ul><ul><li>Sophos Console Administrators </li></ul></ul>...
References <ul><li>Sophos enterprise solutions installation advisor  </li></ul><ul><ul><li>http://www.sophos.com/misc/soph...
References <ul><li>Sophos Enterprise Console Manual </li></ul><ul><ul><li>http://www.sophos.com/sophos/docs/eng/manuals/se...
Upcoming SlideShare
Loading in …5
×

Em library

951 views

Published on

Published in: Education
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
951
On SlideShare
0
From Embeds
0
Number of Embeds
2
Actions
Shares
0
Downloads
0
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Em library

  1. 1. Sophos Enterprise Solutions
  2. 2. This Seminar… <ul><li>Overview </li></ul><ul><ul><li>Components — EM Library, Enterprise Console, Clients </li></ul></ul><ul><ul><li>OS requirements and product functionality </li></ul></ul><ul><li>EM Library </li></ul><ul><ul><li>In depth </li></ul></ul><ul><li>Enterprise Console </li></ul><ul><ul><li>In depth </li></ul></ul><ul><li>Clients </li></ul><ul><ul><li>In brief </li></ul></ul>
  3. 3. Overview
  4. 4. Components <ul><li>EM Library (essential) </li></ul><ul><ul><li>Manages downloading of software from Sophos </li></ul></ul><ul><li>Enterprise Console (optional — sort of) </li></ul><ul><ul><li>Manages clients </li></ul></ul><ul><li>Sophos Anti-Virus Clients (essential) </li></ul><ul><ul><li>Client software for virus detection and disinfection </li></ul></ul>
  5. 5. Requirements — EM Library <ul><li>Windows </li></ul><ul><ul><li>Windows NT SP6a </li></ul></ul><ul><ul><li>Windows 2000 Professional or Server (SP3+) </li></ul></ul><ul><ul><li>Windows XP Professional (SP1+) </li></ul></ul><ul><ul><li>Windows 2003 Server </li></ul></ul><ul><li>Requires MMC 1.2 </li></ul><ul><li>IE 5.5 SP2 or above </li></ul>
  6. 6. Requirements — Enterprise Console <ul><li>Windows 2000 (SP3+) or 2003 Server </li></ul><ul><ul><li>If managing more than 10 PCs </li></ul></ul><ul><li>Windows 2000 (SP3+) or XP (SP1+) Professional </li></ul><ul><ul><li>If managing up to 10 PCs </li></ul></ul><ul><ul><li>May be used to define and export policies, regardless of PCs managed </li></ul></ul>
  7. 7. Function — EM Library <ul><li>Downloads package updates from Sophos to a library according to a schedule </li></ul><ul><ul><li>Default is c:program filessophos enterprise managerlibrary shared as SophosEM </li></ul></ul><ul><ul><li>Library can be remote or local </li></ul></ul><ul><li>Optionally publishes packages to make them available to child libraries </li></ul>
  8. 8. Function — EM Library <ul><li>Pushes updates to Central Installation Directories (CIDs) </li></ul><ul><ul><li>CIDs can be on remote servers (e.g. unix) </li></ul></ul><ul><ul><li>CIDs can be published via a web server </li></ul></ul><ul><li>Clients check CIDs for updates and download as required </li></ul>
  9. 9. Function — Enterprise Console <ul><li>Deploy software to clients </li></ul><ul><li>Monitor status of client installations </li></ul><ul><li>Organise clients into groups </li></ul><ul><li>Define and apply updating and anti-virus polices to groups of PCs </li></ul><ul><li>Report on alerts etc. </li></ul>
  10. 10. Library maintained by EM Library Sophos Databank at sophos.com 1. EM Library pulls updates from Sophos according to schedule 2000/XP/2003 CID on Windows share 95/98/Me CID on Windows share Mac OS X 10.2+ CID on AppleShare compatible share 2000/XP/2003 CID on IIS 2000/XP/2003 CID on samba share 2000/XP/2003 CID on Apache 2. EM Library pushes updates to central installation directories (CIDs) OS X OS X OS X XP 2000 2003 95 98 ME XP 2000 2003 3. Clients check CIDS according to their schedule and pull updates from CIDs XP 2000 2003 XP 2000 2003 Clients
  11. 11. How does Enterprise Console fit in? <ul><li>Not required to provide updates to clients </li></ul><ul><li>May be used to manage clients </li></ul>
  12. 12. Documentation <ul><li>Sophos enterprise solutions installation advisor </li></ul><ul><li>Sophos Anti-Virus Startup Guide </li></ul><ul><li>Knowledgebase </li></ul><ul><ul><li>Ignore docs with references to Remote Updates, SAVAdmin </li></ul></ul><ul><ul><li>Look for EM Library v1.2, Enterprise Console 1.0, Clients 4.5 or 5.0 </li></ul></ul><ul><li>http://www.oucs.ox.ac.uk/viruses/sophos/antivirus as a starting point </li></ul>
  13. 13. Questions?
  14. 14. EM Library
  15. 15. Installation <ul><li>Download required network installer from micros.oucs </li></ul><ul><li>Before installation on Domain Controller </li></ul><ul><ul><li>Optionally create domain a/c with admin privileges </li></ul></ul><ul><ul><ul><li>http://www.sophos.com/support/knowledgebase/article/2522.html </li></ul></ul></ul><ul><ul><ul><li>Global credentials used to access and update CIDs (Can be altered for individual CIDS) </li></ul></ul></ul><ul><li>Run installer </li></ul><ul><ul><li>Server: es10sfx.exe (unpacks to sec10) </li></ul></ul><ul><ul><li>Workstation: run es10wssfx.exe – if you run setup.exe from unpacked files it will fail (tells you only server supported!) </li></ul></ul>
  16. 16. Installation <ul><li>To install EM Library only </li></ul><ul><ul><li>sec10ServerinstallerEMConsolesetup.exe </li></ul></ul><ul><li>Post Installation </li></ul><ul><ul><li>Patch MSDE 2000 engine (use MBSA to determine appropriate patches) </li></ul></ul><ul><ul><li>Not required if only installing EM Library (MSDE installed by Enterprise Console only) </li></ul></ul><ul><ul><li>Note EM Library creates share for EM Library installation files </li></ul></ul><ul><ul><ul><li>Default is C:Program FilesSophos Enterprise Managerconsolebininst shared as EMLibInstaller </li></ul></ul></ul>
  17. 17. Configuring EM Library
  18. 18. Create Library <ul><li>Location for downloaded files from Sophos </li></ul><ul><li>Local or remote </li></ul><ul><li>Prompts for installation path and library share name </li></ul><ul><ul><li>Defaults are C:Program FilesSophos Enterprise Manager and SophosEM </li></ul></ul><ul><li>Prompts for path and share name for Central Installation Directories </li></ul><ul><ul><li>Default C:Program FilesSophos Sweep for NT shared as Interchk </li></ul></ul>
  19. 19. Create Library
  20. 20. Create network account <ul><li>Used to update library files </li></ul><ul><li>May need to use pre-created domain account on a domain controller </li></ul><ul><li>Unclear whether you need to pre-create account if installing on member server in a domain </li></ul><ul><ul><li>http://www.sophos.com/support/knowledgebase/article/2522.html </li></ul></ul><ul><li>On standalone server you can choose option to create account </li></ul>
  21. 21. Create Network Account
  22. 22. Select Parent
  23. 23. Select Parent <ul><li>Source of files to download to library </li></ul><ul><li>Can be Sophos databank or another library </li></ul><ul><ul><li>Will generally be the Sophos databank </li></ul></ul><ul><li>Credentials available from ITSS restricted facilities web page </li></ul><ul><ul><li>https://register.oucs.ox.ac.uk:6123/cgi-bin/diagonalley/index </li></ul></ul><ul><ul><li>Under Sophos EM Library Update Service </li></ul></ul><ul><ul><li>Do not divulge these to anyone except ITSS! </li></ul></ul>
  24. 24. Select Parent
  25. 25. Schedule Downloads
  26. 26. Schedule Downloads <ul><li>Sets up schedule for downloading from Sophos or parent library </li></ul><ul><li>Generally set up new schedule and accept defaults </li></ul><ul><li>Downloads updates once every hour (random offset) </li></ul><ul><li>Downloads can also be triggered manually via EM Library </li></ul>
  27. 27. Schedule Downloads
  28. 28. Schedule Downloads
  29. 29. Select Packages
  30. 30. Select Packages <ul><li>Default view shows only the current versions of the new Sophos clients </li></ul>
  31. 31. Select Packages <ul><li>Uncheck options to see more packages </li></ul>
  32. 32. Download Packages
  33. 33. Download packages <ul><li>Triggers initial download of packages to populate both library and central installation folders (CIDs) </li></ul><ul><ul><li>Default CID already set up for each package </li></ul></ul><ul><li>If you want to move CIDs (e.g. to linux box) you can do this before downloading </li></ul><ul><ul><li>… or later </li></ul></ul>
  34. 34. Download Packages <ul><li>Can also be used at any time to trigger manual update of packages </li></ul>
  35. 35. Configuring Packages
  36. 36. Configuring Packages <ul><li>Subscribed </li></ul><ul><ul><li>Will be downloaded according to schedule </li></ul></ul><ul><li>Unsubscribed </li></ul><ul><ul><li>Will not be downloaded </li></ul></ul><ul><ul><li>Right-click to subscribe </li></ul></ul><ul><li>Published </li></ul><ul><ul><li>Available to child libraries </li></ul></ul><ul><ul><li>Right-click to publish </li></ul></ul>
  37. 37. Configuring Central Installations
  38. 38. Configuring Existing CIDs <ul><li>Can alter location of CID (e.g. to a different server) </li></ul><ul><li>Can alter credentials to access CID </li></ul><ul><li>Can change updating schedule (default is to update immediately after library is updated) </li></ul><ul><li>Can locate CIDs on other servers, so long as the location is accessible from Windows box (e.g. via Samba) </li></ul>
  39. 39. Configuring Central Installations <ul><li>Right-click to configure existing CIDs </li></ul>
  40. 40. Add additional CIDs <ul><li>Packages/subscribed and right-click on chosen package </li></ul><ul><li>Configure options as per configuring existing CIDs </li></ul>
  41. 41. CIDs — Additional Information <ul><li>Note special requirements for CIDs for the following clients (see manuals) </li></ul><ul><ul><li>Mac OS X </li></ul></ul><ul><ul><li>Netware </li></ul></ul><ul><ul><li>Unix </li></ul></ul><ul><li>We will cover some of these points in more detail in future seminars </li></ul><ul><li>Manually update a CID via right-click/Update CID </li></ul>
  42. 42. CID Anatomy Used to check synchronisation status cidsync.upd Optional file to configure updating policy sauconf.xml Used to check synchronisation status cidsync.upd Optional file to configure A-V policy savconf.xml Used to check synchronisation status cidsync.upd Sophos Anti-virus files savxp Remote Management System files rms AutoUpdate files sau Used to check synchronisation status cidsync.upd Main setup file setup.exe cid Purpose Top Level
  43. 43. CID Anatomy <ul><li>cidsync.upd </li></ul><ul><ul><li>Clients use this to check synchronisation status </li></ul></ul><ul><ul><li>Includes details of all files (including ides) </li></ul></ul><ul><ul><li>Binary file, generally updated by EM Library </li></ul></ul><ul><li>rms folder is optional </li></ul><ul><ul><li>Remote management components used by Enterprise Console </li></ul></ul><ul><ul><li>Need to tell installer not to use it (default is to install rms) </li></ul></ul><ul><ul><li>More on this in the next seminar… </li></ul></ul>
  44. 44. EM Library — Tools/Options <ul><li>Console Options </li></ul><ul><ul><li>Display, refresh etc. </li></ul></ul><ul><li>Security </li></ul><ul><ul><li>Who can run EM Library </li></ul></ul><ul><ul><li>Effectively adds and removes users or groups from the EMLibrary Users group </li></ul></ul><ul><li>Notifications </li></ul><ul><ul><li>Method (Email, Event Log, Network Messaging) </li></ul></ul><ul><ul><li>What is notified </li></ul></ul>
  45. 45. EM Library — Scripts <ul><li>serverSophosEMbinEMLexp.exe (C:Program FilesSophos Enterprise ManagerLibrarybinEMLexp.exe) </li></ul><ul><ul><li>Export library settings to XML file </li></ul></ul><ul><ul><li>Import library settings from XML file </li></ul></ul><ul><ul><li>Trigger manual update of a library </li></ul></ul><ul><ul><li>NB File may require editing before import to different server (see http://www.sophos.com/sophos/docs/eng/manuals/eml_men.pdf) </li></ul></ul>
  46. 46. EM Library — Scripts <ul><li>Manual update of child library via batch file </li></ul><ul><ul><li>http://www.sophos.com/sophos/docs/eng/manuals/eml_men.pdf ) </li></ul></ul><ul><ul><li>Page 48 </li></ul></ul>
  47. 47. Questions?
  48. 48. Sophos Enterprise Console
  49. 49. Enterprise Console <ul><li>Install using network installers as per EM Library </li></ul><ul><li>Manage clients in a controlled environment, e.g. college or department </li></ul><ul><ul><li>Remote installation and updating of Sophos </li></ul></ul><ul><ul><li>Status of Sophos on machines </li></ul></ul><ul><ul><li>Reporting </li></ul></ul><ul><li>Apply Policies for updating and A-V engine </li></ul><ul><ul><li>Apply via Enterprise Console </li></ul></ul><ul><ul><li>Or export to files for inclusion in CIDs </li></ul></ul>
  50. 50. Console View
  51. 51. Viewing Computers <ul><li>Actions/Find Computers </li></ul><ul><ul><li>Relies on Microsoft networking (browse masters etc.) </li></ul></ul><ul><ul><li>Windows XP firewall likely to cause problems </li></ul></ul><ul><li>File/Import computers from file </li></ul><ul><ul><li>File format (text file) </li></ul></ul><ul><ul><ul><li>[] </li></ul></ul></ul><ul><ul><ul><li>||name1 </li></ul></ul></ul><ul><ul><ul><li>||name2 </li></ul></ul></ul><ul><ul><li>Netbios or DNS names </li></ul></ul><ul><ul><li>See help for full information (testing shows that you may need to include OS) </li></ul></ul>
  52. 52. Organising Computers — Groups <ul><li>Need at least one group in order to define policies </li></ul><ul><li>Move PCs from Unassigned into groups </li></ul>
  53. 53. Configuring Policies <ul><li>Updating and Anti-virus policies </li></ul><ul><li>Policies may be different for each group </li></ul><ul><li>Updating policy has different sections for each OS </li></ul><ul><ul><li>At least one section must be configured </li></ul></ul><ul><li>Updating policy must be set before protecting PCs via Enterprise Console </li></ul><ul><li>Use Comply with… to enforce policies </li></ul>
  54. 54. Updating Policy <ul><li>Need to specify at least </li></ul><ul><ul><li>Primary source (for updates) </li></ul></ul><ul><ul><li>Credentials (if required) </li></ul></ul><ul><li>Can specify other items </li></ul><ul><ul><li>How often client checks for updates </li></ul></ul>
  55. 55. Updating Policy
  56. 56. Anti-virus policy <ul><li>E.g. scheduled and on-access scanning </li></ul>
  57. 57. Protect Computers — Prerequisites <ul><li>Need access to clients via file share </li></ul><ul><ul><li>XP or other personal firewall </li></ul></ul><ul><ul><li>May prefer to install from client </li></ul></ul><ul><li>Need account with admin credentials on clients </li></ul><ul><li>Need same account credentials to exist on server (does not need to be admin) </li></ul><ul><ul><li>Don’t have to be logged in as this account </li></ul></ul><ul><ul><li>Suspect non-domain issue </li></ul></ul><ul><li>Must configure Updating Policy on group before protecting </li></ul>
  58. 58. Protect Computers — Wizard
  59. 59. Enterprise Console and Firewalls <ul><li>3 services on client (see Appendix B) </li></ul><ul><li>Using TCP 8192-8194 </li></ul><ul><li>Connections may be initiated by server or clients </li></ul><ul><li>Be wary of firewalls at both ends </li></ul><ul><li>Only applies for management of machines </li></ul><ul><ul><li>Scheduled client updates are always initiated from the client end </li></ul></ul>
  60. 60. Policies <ul><li>Can be applied via Enterprise Console </li></ul><ul><li>Can also be applied using files </li></ul><ul><ul><li>Sauconf.xml (Updating policy) in sau folder </li></ul></ul><ul><ul><li>Savconf.xml (A-V policy) in savxp folder </li></ul></ul><ul><li>Useful for clients not managed by Enterprise Console </li></ul><ul><ul><li>Web-based CIDs </li></ul></ul>
  61. 61. Policies <ul><li>Export group policies from Enterprise Console using exportconfig.exe </li></ul><ul><ul><li>sec10tools or sec10wstools </li></ul></ul><ul><li>More detail in next seminar </li></ul>
  62. 62. Questions?
  63. 63. Sophos Clients
  64. 64. Client Installation <ul><li>Sophos AutoUpdate installed first </li></ul><ul><ul><li>Configured with source of Sophos files </li></ul></ul><ul><ul><li>Credentials to access files </li></ul></ul><ul><li>Sophos AutoUpdate </li></ul><ul><ul><li>Fetches and installs other components using source and credentials </li></ul></ul><ul><li>Management Components </li></ul><ul><ul><li>Optional (default install from CID includes these) </li></ul></ul><ul><ul><li>Enterprise Console will install them; can be turned off using other installation methods </li></ul></ul>
  65. 65. Client Components on Windows XP Enterprise Console Management Virus Detection Updating Sophos Purpose 1. Sophos Agent 2. Sophos AutoUpdate Agent 3. Sophos Message Router Sophos Remote Management System 1. Sophos Anti-Virus 2. Sophos Anti-Virus status reporter Sophos Anti-Virus 1. Sophos AutoUpdate Service Sophos AutoUpdate Services Component
  66. 66. Client Configuration <ul><li>Groups created </li></ul><ul><ul><li>SophosAdministrator </li></ul></ul><ul><ul><li>SophosPowerUser </li></ul></ul><ul><ul><li>SophosUser </li></ul></ul><ul><li>Automatically puts members of Administrators into SophosAdministrator, etc. </li></ul><ul><li>Restricts access to configuration options </li></ul>
  67. 67. Group Restrictions <ul><li>Member of SophosAdministrator group </li></ul>
  68. 68. Group Restrictions <ul><li>Member of SophosUser group </li></ul>
  69. 69. Client Installation and Configuration <ul><li>To be continued… </li></ul>
  70. 70. Questions?
  71. 71. Appendix A — EM Library <ul><li>Default Shares </li></ul><ul><ul><li>C:Program FilesSophosEnterprise Managerconsolebininst (EMLibInstaller) </li></ul></ul><ul><ul><ul><li>Installation files for EM Library </li></ul></ul></ul><ul><ul><li>C:Program FilesSophos Enterprise ManagerLibrary (SophosEM) </li></ul></ul><ul><ul><ul><li>Library </li></ul></ul></ul><ul><ul><li>C:Program FilesSophos Sweep for NT (Interchk) </li></ul></ul><ul><ul><ul><li>Client software Central Installation Directories </li></ul></ul></ul>
  72. 72. Appendix A — EM Library <ul><li>Services created when Library is created </li></ul><ul><ul><li>Sophos EMLibUpdate Agent </li></ul></ul><ul><ul><li>Sophos Enterprise Manager Scheduler </li></ul></ul>
  73. 73. Appendix A — EM Library <ul><li>Users created (optional) </li></ul><ul><ul><li>EMLibUser1 (can specify alternative account) </li></ul></ul><ul><ul><li>Member of Administrators </li></ul></ul><ul><li>Groups created </li></ul><ul><ul><li>EMLibrary Users </li></ul></ul><ul><ul><li>Members of existing Administrators group are made members automatically </li></ul></ul>
  74. 74. Appendix B — Enterprise Console <ul><li>Shares created </li></ul><ul><ul><li>None known </li></ul></ul><ul><li>Services created </li></ul><ul><ul><li>Sophos Agent </li></ul></ul><ul><ul><li>Sophos AutoUpdate Agent </li></ul></ul><ul><ul><li>Sophos Certification Manager </li></ul></ul><ul><ul><li>Sophos Management Service </li></ul></ul><ul><ul><li>Sophos Message Router </li></ul></ul>
  75. 75. Appendix B — Enterprise Console <ul><li>Groups created </li></ul><ul><ul><li>Sophos Console Administrators </li></ul></ul><ul><ul><li>Members of existing Administrators group are made members automatically </li></ul></ul><ul><ul><li>Must be a member of this group in order to run Enterprise Console </li></ul></ul>
  76. 76. References <ul><li>Sophos enterprise solutions installation advisor </li></ul><ul><ul><li>http://www.sophos.com/misc/sophos_es_support_pack.chm </li></ul></ul><ul><li>Sophos Anti-Virus Startup Guide </li></ul><ul><ul><li>http://www.sophos.com/sophos/docs/eng/instguid/esav_sen.pdf </li></ul></ul><ul><li>Sophos EM Library Manual </li></ul><ul><ul><li>http://www.sophos.com/sophos/docs/eng/manuals/eml_men.pdf </li></ul></ul>
  77. 77. References <ul><li>Sophos Enterprise Console Manual </li></ul><ul><ul><li>http://www.sophos.com/sophos/docs/eng/manuals/sec_men.pdf </li></ul></ul><ul><li>OUCS Guide to Installing and Configuring EM Library and Automatic Client Updating </li></ul><ul><ul><li>http://www.oucs.ox.ac.uk/viruses/sophos/enterprise/ </li></ul></ul><ul><ul><li>Refer to references section for more links </li></ul></ul>

×