Managed Service Provider guide for a single server
9 Publish customer update folders
When you download the security software a shared 'SophosUpdate' folder is automatically created at the following location on the SEC Server
\\<SEC-Server>\SophosUpdate\
. This shared folder must be accessible by http so customers' computers can update from it.
To do this:
1. Install and configure Microsoft IIS on the SEC Server and secure it appropriately (for computers to download Sophos updates, we recommend you use an account with read-only permission for each customer organisation).
2. In IIS, create a virtual directory called
Sophos
, which shares
\\<SEC-Server>\SophosUpdate\
to facilitate access via the internet.
To use the localpath instead of UNC, the default path to the CID is:
Windows
Server
Default CID location
2003 C:\Documents and Settings\All Users\Application Data\Sophos\Update Manager\Update
Manager\
2008, 2008
R2, 2012,
2012 R2,
2016
C:\ProgramData\Sophos\Update Manager\Update Manager\
3. Configure MIME types. For testing purposes, you can add .* as a MIME type.
For more information on how to create a Web CID and configure MIME types, see knowledgebase article 38238 .
Note: HTTPS is not supported for client updating. We recommend that you use NTLM (Integrated
Windows authentication) or Digest authentication to ensure credentials are secure. These settings can be configured in IIS, and the clients will automatically use the most secure option available to them.
17
