Sophos Enterprise Console startup guide
product version: 5.5
Contents
About this guide....................................................................................................................................... 1
System requirements............................................................................................................................... 2
Protecting Linux computers..................................................................................................................... 3
Install Sophos Anti-Virus for the first time manually..................................................................... 3
Create a deployment package...................................................................................................... 3
Installing Sophos Anti-Virus using the deployment package........................................................ 4
Protecting UNIX computers..................................................................................................................... 6
Install Sophos Anti-Virus for the first time manually..................................................................... 6
Create a deployment package...................................................................................................... 7
Installing Sophos Anti-Virus using the deployment package........................................................ 7
Check the health of your network............................................................................................................9
Appendix: Command-line options for mkinstpkg................................................................................... 10
Technical support................................................................................................................................... 12
Legal notices.......................................................................................................................................... 13
(2018/12/17)
Sophos Enterprise Console
1 About this guide
This guide describes the procedure for installing Sophos Anti-Virus on Linux and UNIX computers, so that it is managed by Sophos Enterprise Console. The guide assumes that you have installed the management tools, as explained in the Sophos Enterprise Console advanced startup guide .
Copyright © Sophos Limited 1
Sophos Enterprise Console
2 System requirements
For system requirements, go to the system requirements page of the Sophos website ( http:// www.sophos.com/en-us/products/all-system-requirements.aspx
).
For details of any additional requirements, for example for language support, see the "Additional information" section in the release notes.
2 Copyright © Sophos Limited
Sophos Enterprise Console
3 Protecting Linux computers
To protect Linux computers using a deployment package, you must:
• Install Sophos Anti-Virus on a Linux server for the first time manually.
• Create a deployment package.
• Install Sophos Anti-Virus on the rest of the Linux computers.
3.1 Install Sophos Anti-Virus for the first time manually
This section assumes that you have downloaded Sophos Anti-Virus, as explained in the Sophos
Enterprise Console advanced startup guide .
1. To find out the path of the shared folder to which Sophos Anti-Virus has been downloaded, known as the bootstrap location: a) In Sophos Enterprise Console, on the View menu, click Bootstrap Locations.
In the Bootstrap Locations dialog box, the Location column displays the path of the bootstrap location for each platform.
b) Make a note of the relevant path.
2. Log on to your Linux server as root.
3. Mount the bootstrap location.
4. Change to the bootstrap location.
5. Run the install script: ./install.sh
.
When prompted, choose to enable remote management.
When installation has finished, in Sophos Enterprise Console the Linux server appears in the
Unassigned group.
6. If you have not done so already, in Sophos Enterprise Console create a new group where you want to put the Linux server.
7. Drag the server from the Unassigned group to this group.
8. By default, this group already has a default updating policy applied to it. If you need to edit the policy, see the Sophos Enterprise Console help .
9. On the Linux server, trigger the first update: /opt/sophos-av/bin/savupdate .
Now create a deployment package.
3.2 Create a deployment package
You can use the mkinstpkg script to create a deployment package for your end-users. This script prompts you for information about how Sophos Anti-Virus will be installed on your Linux computers, and the answers gathered are inserted into the deployment package. When the end-user installs from this deployment package, it will not prompt for any information and will set up both the update location and credentials correctly. You can create a package in tar, RPM or deb format.
Copyright © Sophos Limited 3
4
Sophos Enterprise Console
Note
The deb format is supported in Sophos Anti-Virus version 9.11 and later.
Note
The mkinstpkg script is for use within your organization only. Please read the license agreement and legal notice displayed by the mkinstpkg script.
Note
The instructions here show how to specify the package format. For details of other options you can use, see
Appendix: Command-line options for mkinstpkg
(page 10).
To create a deployment package:
1. On the Linux server where you installed Sophos Anti-Virus, change to the directory /opt/ sophos-av/update/ .
2. To create a package in the current directory, do one of the following:
• To create a tar format deployment package, called savinstpkg.tgz
, type: ./mkinstpkg .
• To create an RPM format deployment package, called savinstpkg-0.0-1.i586.rpm
, type: ./mkinstpkg -r .
Note
The filename might be slightly different depending on the RPM setup.
• To create a deb format deployment package called savinstpkg.deb
, type: ./mkinstpkg
-D .
Note
The deb format is supported in Sophos Anti-Virus version 9.11 and later.
3. When prompted, choose to have the computers managed by Sophos Enterprise Console.
4. When prompted for the location, enter the bootstrap location (as seen from the Linux computers).
Now you are ready to install Sophos Anti-Virus using this deployment package.
3.3 Installing Sophos Anti-Virus using the deployment package
You use the package to install Sophos Anti-Virus in one of two ways:
• Manually on each computer. This approach can be used with a package in RPM or tar format.
• Automatically across the network. This approach can be used only with a package in RPM format.
Copyright © Sophos Limited
Sophos Enterprise Console
3.3.1 Install Sophos Anti-Virus manually
1. Use your own tools to copy the deployment package to the computers where you want to install
Sophos Anti-Virus.
2. Go to each computer and log in as root.
3. Place the deployment package in a temporary directory and change to that directory.
4. Do one of the following:
• To install from the tar package, type: tar -zxvf savinstpkg.tgz./sophos-av/ install.sh
.
• To install from the RPM package, type: rpm -i RPM package .
• To install from the deb package, type: dpkg -i deb package .
The necessary files are copied from the server and Sophos Anti-Virus is installed. From now on,
Sophos Anti-Virus will be updated automatically whenever the bootstrap location is updated.
Sophos Anti-Virus also sends product and platform information to Sophos to help us with product development. See Sophos Knowledgebase Article 121214 .
3.3.2 Install Sophos Anti-Virus automatically
• To install Sophos Anti-Virus automatically from the deployment package, use one of the operating system administration tools that support remote deployment.
For more information, see the documentation for that tool.
Once Sophos Anti-Virus is installed, it will be started and will be updated automatically whenever the bootstrap location is updated.
Sophos Anti-Virus also sends product and platform information to Sophos to help us with product development. See Sophos Knowledgebase Article 121214 .
Copyright © Sophos Limited 5
Sophos Enterprise Console
6
4 Protecting UNIX computers
To protect UNIX computers, you must use a deployment package. To do this:
• Install Sophos Anti-Virus on a UNIX server for the first time manually.
• Create a deployment package.
• Install Sophos Anti-Virus on the rest of the UNIX computers.
Note
In the Japanese AIX environment, please specify "LANG=C" during installation.
4.1 Install Sophos Anti-Virus for the first time manually
This section assumes that you have downloaded Sophos Anti-Virus, as explained in the Sophos
Enterprise Console advanced startup guide .
Note
If Sophos Anti-Virus version 4 is installed on your UNIX server, you must uninstall it before you install version 9. For information, see the Sophos Anti-Virus for UNIX and Linux startup guide for version 4.
1. To find out the path of the shared folder to which Sophos Anti-Virus has been downloaded, known as the bootstrap location: a) In Sophos Enterprise Console, on the View menu, click Bootstrap Locations.
In the Bootstrap Locations dialog box, the Location column displays the path of the bootstrap location for each platform.
b) Make a note of the relevant path.
2. Log on to your UNIX server as root.
3. Mount the bootstrap location.
4. Change to the bootstrap location.
5. Run the install script: ./install.sh
.
When prompted, choose to enable remote management.
When installation has finished, in Sophos Enterprise Console the UNIX server appears in the
Unassigned group.
6. If you have not done so already, in Sophos Enterprise Console create a new group where you want to put the UNIX server.
7. Drag the server from the Unassigned group to this group.
8. By default, this group already has a default updating policy applied to it. If you need to edit the policy, see the Sophos Enterprise Console Help .
9. On the UNIX server, trigger the first update: /opt/sophos-av/bin/savupdate .
Now create a deployment package.
Copyright © Sophos Limited
Sophos Enterprise Console
4.2 Create a deployment package
You can use the mkinstpkg script to create a deployment package for your end-users. This script prompts you for information about how Sophos Anti-Virus will be installed on your UNIX computers, and the answers gathered are inserted into the deployment package. When the end-user installs from this deployment package, it will not prompt for any information and will set up both the update location and credentials correctly. You can create a package in tar format.
Note
The mkinstpkg script is for use within your organization only. Please read the license agreement and legal notice displayed by the mkinstpkg script.
To create a deployment package:
1. On the UNIX server where you installed Sophos Anti-Virus, change to the directory /opt/ sophos-av/update/ .
2. To create a deployment package in tar format, called savinstpkg.tar
, type:
./mkinstpkg
3. When prompted, choose to have the computers managed by Sophos Enterprise Console.
4. When prompted for the location, enter the bootstrap location (as seen from the UNIX computers).
Now you are ready to install Sophos Anti-Virus using this deployment package.
4.3 Installing Sophos Anti-Virus using the deployment package
You use the package to install Sophos Anti-Virus in one of two ways:
• Manually on each computer.
• Automatically across the network.
4.3.1 Install Sophos Anti-Virus manually
1. Use your own tools to copy the deployment package to the computers where you want to install
Sophos Anti-Virus.
2. Go to each computer and log in as root.
3. Place the deployment package in a temporary directory and change to that directory.
4. To install from the tar package, type: tar -xvf savinstpkg.tar./sophos-av/install.sh
.
The necessary files are copied from the server and Sophos Anti-Virus is installed. From now on,
Sophos Anti-Virus will be updated automatically whenever the bootstrap location is updated.
Sophos Anti-Virus also sends product and platform information to Sophos to help us with product development. See Sophos Knowledgebase Article 121214 .
Copyright © Sophos Limited 7
Sophos Enterprise Console
4.3.2 Install Sophos Anti-Virus automatically
• To install Sophos Anti-Virus automatically from the deployment package, use one of the operating system administration tools that support remote deployment.
For more information, see the documentation for that tool.
Once Sophos Anti-Virus is installed, it will be started and will be updated automatically whenever the bootstrap location is updated.
Sophos Anti-Virus also sends product and platform information to Sophos to help us with product development. See Sophos Knowledgebase Article 121214 .
8 Copyright © Sophos Limited
Sophos Enterprise Console
5 Check the health of your network
To check the health of your network from Sophos Enterprise Console, do as follows.
On the menu bar, click the Dashboard icon (if the Dashboard is not already displayed).
The Dashboard shows you how many computers:
• Have detected threats.
• Are out of date.
• Do not comply with policies.
Copyright © Sophos Limited 9
Sophos Enterprise Console
6 Appendix: Command-line options for mkinstpkg
The mkinstpkg tool creates a deployment package that end users can use to install Sophos Anti-
Virus.
The default installation location is /opt/sophos-av/update .
Here is a full list of the command-line options you can use with mkinstpkg. "=" at the end of the option means it takes an argument.
Option
-d,--debug
-h,--help
-o=,--output=
-r,--rpm
-D,--deb
--tar
--update-proxy-address=
--update-proxy-username=
--update-proxy-password=
--extra-options=
-v,--verbose
--rpm-version=
--rpm-release=
--sophos
Description
Use the --debug option when the Sophos Anti-
Virus installer is run.
Output help text
Destination for the package
Build an RPM package
Build a DEB package
Build a tar file (default)
Proxy address to use when installing Sophos
Anti-Virus over HTTP
Proxy username to use when installing Sophos
Anti-Virusover HTTP
Proxy password to use when installing Sophos
Anti-Virus over HTTP
Extra installer options to use when installing
Sophos Anti-Virus, for example: --extraoptions="--preferFanotify"
Use the --verbose option when the Sophos Anti-
Virusinstaller is run.
RPM version if building an RPM package
RPM release version if building an RPM package
Update from Sophos rather than your own server
10 Copyright © Sophos Limited
Option
--update-type=
--sec-group=
Sophos Enterprise Console
Description
Specify where Sophos Anti-Virus will update from. Use "s" for updates from Sophos, or anything other than "s" for updates from your own server.
The group that computers will be added to when
Sophos Anti-Virus is installed
Copyright © Sophos Limited 11
Sophos Enterprise Console
7 Technical support
You can find technical support for Sophos products in any of these ways:
• Visit the Sophos Community at community.sophos.com/ and search for other users who are experiencing the same problem.
• Visit the Sophos support knowledge base at www.sophos.com/en-us/support.aspx
.
• Download the product documentation at www.sophos.com/en-us/support/documentation.aspx
.
• Open a ticket with our support team at https://secure2.sophos.com/support/contact-support/ support-query.aspx
.
12 Copyright © Sophos Limited
Sophos Enterprise Console
8 Legal notices
Copyright © 2018 Sophos Limited. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.
Sophos, Sophos Anti-Virus and SafeGuard are registered trademarks of Sophos Limited, Sophos
Group and Utimaco Safeware AG, as applicable. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.
Copyright © Sophos Limited 13
