5.5 Protect computers automatically. Sophos Enterprise Console

Sophos Enterprise Console

52

■

If you want to remove not just the other vendor's software but also the other vendor's update tool (to prevent it from reinstalling the software automatically), follow the steps below. If computers have no update tool installed, you can disregard the steps below.

Note: You have to locally restart any computers from which you remove third-party anti-virus software.

If computers have another vendor's update tool installed and you wish to remove the update tool, you will need to modify the configuration file before selecting the Third-Party Security Software

Detection option in the Protect Computers Wizard.

Note: If computers are running another vendor's firewall or HIPS product, you may need to leave that vendor's update tool intact. See that vendor's documentation for clarification.

To modify the configuration file:

1. From the Central Installation Directory, find the data.zip file.

2. Extract the crt.cfg configuration file from data.zip.

3. Edit the crt.cfg file to change the line reading "RemoveUpdateTools=0" to

"RemoveUpdateTools=1".

4. Save your changes and save crt.cfg to the same directory that contains data.zip. Do not put crt.cfg back into data.zip or it will be overwritten the next time the data.zip file is updated.

When you run the Protect Computers Wizard and select Third-Party Security Software

Detection, the modified configuration file will now remove any third-party security update tools as well as third-party security software.

5.5 Protect computers automatically

Before you protect computers from the console:

■

You must apply an updating policy to the group before you can protect computers in that group.

■

■

Make sure you have prepared computers for automatic installation of the security software as

described in Prepare for installation of anti-virus software

(page 50).

If you use role-based administration, you must have the Computer search, protection and

groups right to protect computers. For more information, see About roles and sub-estates

(page 20).

Automatic installation is not possible on Mac, Linux and UNIX computers. Use manual installation instead. For the instructions, see the Sophos Enterprise Console advanced startup guide. Sophos documentation is published at http://www.sophos.com/en-us/support/documentation .

If you chose to synchronize with Active Directory and protect the computers automatically, you

do not need to follow the steps below. For details, see

About synchronization with Active Directory

(page 43) and other related topics.

To protect computers automatically:

1. Depending on whether or not the computers you want to protect are already in a group, do one of the following:

■

■

If the computers you want to protect are in the Unassigned group, drag the computers onto a group.

If the computers you want to protect are already in a group, select the computers, right-click and click Protect Computers.