Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login
Views: 6.1k  |  Created: 12/30/2011

Average Rating: 0
Anti-Virus has 2 inventory records, 6 Questions, 1 Blogs and 1 links. Please help add to this by sharing more!

Deployment Tips (1)

Most Common Setup Type
Not Determined
Average Package Difficulty Rating
Rated 4 / 5 (Somewhat Difficult) based on 1 ratings
Most Commonly Reported Deployment Method
Not Determined

Deployment Tip Summary

Download the 'Sophos Deployment Packager Tool' (http://www.sophos.com/en-us/support/knowledgebase/67504.aspx) 1. Browse to `\\server\SophosUpdate\CIDs\S000\` and copy the SAVSCFXP folder to the folder you created on desktop. Type `"%userprofile%\Desktop\savinst\SAVSCFXP"` if using a command prompt. 2. Create a copy of the SAVSCFXP folder and rename the copy to SAVSCFXPXML. You should now have two folders inside the 'savinst' folder on the desktop - one called SAVSCFXP and the other SAVSCFXPXML, both with the same contents. 3. Using ExportConfig.exe export from the Console the policies you wish to apply to the endpoint. An example for Enterprise Console 4.x is shown below. `"%programfiles%\Sophos\Enterprise Console\exportconfig.exe" -type AU -policy PolicyName] -output "%userprofile%\Desktop\savinst\SAVSCFXPXML\sau\sauconf.xml"` 4. Ensure all output files, for each policy exported, are saved to the associated SAVXPSCFXML subfolder. Example: For the updating policy place the sauconf.xml file in:`%userprofile%\Desktop\savinst\SAVSCFXPXML\sau\sauconf.xml` 5. Integrate the XML files created in step 4 into the package with the [ConfigCID.exe tool. An example for Enterprise Console 4.x is shown below. `"%programfiles%\Sophos\Enterprise Console\SUM\configcid.exe" "%userprofile%\Desktop\savinst\SAVSCFXPXML"` 6. To save space, you can now delete the following files and folders, if they exist: * From the savinst\SAVSCFXP folder on the desktop: all of the NAC, RMS, SAVXP and SCF subfolders * From the savinst\SAVSCFXPXML folder: crt instmsiw.exe setup*.* 7. You can also delete any component that will not be installed (e.g. nac, scf) from the SAVSCFXPXML folder. #### Create a self-extracting archive that executes setup.exe with the appropriate parameters See also Command line parameters used by Setup.exe if you would like to customize the setup parameters. For the purpose of this article WinRAR will be used, but any other tool that accomplishes the same job is acceptable. 1. Inside the savinst folder, select both SAVSCFXP and SAVSCFXPXML, then right-click and choose “Add to archive…” 2. Under Archiving options, select “Create SFX archive” and select “Create solid archive” 3. In the Advanced tab, click the “SFX options…” button 4. Specify in the “Path to extract” text field:%SystemRoot%\Temp\savinst 5. Do one of the following: * Managed (client will report to the console):- specify in the “Run after extraction” text field:SAVSCFXP\setup.exe -mng yes -ni -s -crt R -updp %SystemRoot%\Temp\savinst\SAVSCFXPXML If the client has to report across a WAN network please see: Using Sophos message relays in a public WAN. * Unmanaged (the client will not report to the console):- specify in the "Run after extraction" text field:SAVSCFXP\setup.exe -mng no -ni -s -crt R -updp %SystemRoot%\Temp\savinst\SAVSCFXPXML 6. In the Modes tab, select “Hide all” 7. In the Update tab select “Overwrite all files” 8. Click OK to accept the options 9. Click OK to generate the self-extracting installer Run the self-extracting installer on all machines where SESC is to be deployed.
Command Line

SETUP [-mng yes|no] [-scf] [-nac http://<NACSERVERADDRESS>] [-crt R] [-updp <path>] [-user <username>] [-pwd <password>] [-mngcfg <RMS config path>] [-compname <computername>] [-compdesc <computerdescription>] [-domain <domainname>] [-G <groupname>] -s -ni -?

-mng yes|no                Is the computer to be managed?

-scf                            Install Sophos Client Firewall (Windows 2000+)

-patch http://<MANAGEMENTSERVERADDRESS>      Installs Sophos Patch agent and specifies the address of  the Sophos management server.  Only available with version 10+.          

 -patch http://<MANAGEMENTSERVERADDRESS>:<PORT>          Installs Sophos Patch agent, specifies the address of the Sophos management server and a custom port number. Only available with version 10+

-nac http://<NACSERVERADDRESS>             Installs network access control and specifies the address of the Sophos NAC server

-crt R                         Removes third-party security software automatically

-updp <path>              Location of the primary CID from where the computer will get its updates.

-user<username>       Account for accessing the primary CID location.

-pwd <password>       Password for the above account

-ouser <username>     Obfuscated account name for accessing the CID location, if required.

-opwd <password>      Obfuscated password.

-mngcfg <RMS config path>      Location of the RMS configuration files.

-compname <computername>     Specify a computer name to override the one used in Windows. This name will appear in Enterprise Console.

-compdesc <computerdescription>     Specify a computer description to override the one used in Windows. This description will appear in Enterprise Console.

-domain <domainname>     Specify a domainname to override that on the client. This name will appear in Enterprise Console/ Manager.

-g "\<nameofserver>\<Groupname>"    Specifies the group (set up in Enterprise Console/ Manager) to which the computer will belong. 

-rlogin       Start reinstallalation on Windows 95/98/Me computers from login scripts.

-login        Start installation on Windows 95/98/Me computers from login scripts.

-s             Perform installation silently.

-ni            Perform a non-interactive installation.

-?             Display command line parameter help.

Setup Information:
Setup Type: unspecified
Deployment Method Used: unspecified
Deployment Difficulty: unspecified
Platform(s): Windows

Inventory Records (2)

View inventory records anonymously contributed by opt-in users of the K1000 Systems Management Appliance.




Questions & Answers (6)

Questions & Answers related to Sophos Anti-Virus


Blogs (1)

Blog posts related to Sophos Anti-Virus

Reviews (0)

Reviews related to Sophos Anti-Virus

This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ