Sophos

Online support

Product maintenance

Contact support

Support services

Sophos Anti-Virus for Windows: protecting computers without using Enterprise Console

You can manage Sophos Anti-Virus current versions without using Enterprise Console. In this case, you use Enterprise Console to configure your policies, but do not use it for monitoring.

What to do

1. Protecting Windows computers

Use Enterprise Console to pre-configure your software, and then use ConfigCID.exe to implement the configuration files.

  1. Set updating, anti-virus and firewall policies with Enterprise Console (see sections 10-14 of the startup guide). Ensure that the user account you specify in the updating policy does not have access to any directories except the one that computers will update from. Access to that directory should be read-only.
  2. Use the tool ExportConfig.exe, available from the Tools folder on the Sophos Anti-Virus Network Install CD, to export these policies to two XML files. Each XML file includes the policy information needed for all operating systems in the computer group.
  3. Place the XML files in the directories from which Sophos Anti-Virus and Sophos AutoUpdate (the updating component) will be installed and updated. There are different directories for each operating system in the group. The default directories where you should place the XML files are as follows.
    For Windows 2000/XP/2003 computers
    • Anti-virus XML file in: \\SERVER\InterChk\ESXP\savxp\savconf.xml or \\SERVER\InterChk\SCPXP\savxp\savconf.xml
    • Updating XML file in: \\SERVER\InterChk\ESXP\sau\sauconf.xml or \\SERVER\InterChk\SCPXP\sau\sauconf.xml
    For Windows NT4 computers
    • Anti-virus XML file in: \\SERVER\InterChk\ESNT\sav\savconf.xml
    • Updating XML file in: \\SERVER\InterChk\ESNT\sau\sauconf.xml
    For Windows 95/98/Me computers
    • Anti-virus XML file in: \\SERVER\InterChk\ES9X\sav9x\savconf.xml
    • Updating XML file in: \\SERVER\InterChk\ES9X\sau\sauconf.xml
  4. Use the tool ConfigCID.exe, available from the Tools folder on the Sophos Anti-Virus Network Install CD, to add the configuration files to the update list.
  5. Now protect the computer, either manually or by using a script.

2. Protecting Mac OS X computers

Before you install Sophos Anti-Virus on Mac OS X computers, you need to configure automatic updating and virus alerts.

  1. At a Mac OS X computer, insert the Sophos Anti-Virus Supplementary CD. Double-click the CD icon on the desktop.
  2. In the CD window, double-click 'Sophos Anti-Virus for OS X 10.2+'. Then double-click the Sophos Update Manager icon.
  3. In the Welcome dialog, click 'Choose'. Select the directory in which EM Library has placed Sophos Anti-Virus for Mac OS X. If the directory is on a Windows computer, by default it is //SERVER/InterChk/ESOSX.
    Then select 'Change default Sophos preferences'. Click 'Next'.
    Do not select 'Manage virus identity files'. EM Library manages these files.
  4. In the Sophos Default Preferences dialog box, click the AutoUpdate tab. In the 'Show pop-up' menu, ensure that 'Network Settings' is selected.
    In the Primary Server tabbed page, select Network volume. In URL, enter the full path to your central installation. If necessary, enter the User name and Password needed to access the central installation. Click 'Set'.
    By default, the workstations are updated every 60 minutes. To change this setting, select 'Scheduling' in the Show pop-up menu.
    Then click the Notification tab.
  5. At the Notification tabbed page, in the Show pop-up menu, choose 'Email Notification'. Select 'Enable on-access scanner email notification'. Enter the email address of the Recipient to whom you want alerts sent. Enter a Sender address to which undelivered alerts can be returned. Then enter the address and port number of the Outgoing mail server.
    Click 'Set' and close the dialog box.
  6. If your central installation directory (CID) is held on a Mac OS X server, you must now reset the file permissions for that directory, so that other Macintoshes can access it later. In a Finder window, click 'Applications'. Then click 'Utilities'. Double-click 'Terminal' to open Terminal. Set the current directory to the CID and run the following command:
    chmod -R +x ESOSX
    In future, when workstations try to update, you may sometimes see a warning that the Sophos Anti-Virus installer could not be opened from the CID. If so, reset the permissions again as above.
  7. Now protect the computers, either manually or by using a script.

If you need more information or guidance, then please contact technical support.