Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 8 replies
  • Subscribers 6 subscribers
  • Views 5509 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Safeguard Enterprise in Image

vojta

I know it's probably not recommended but has anybody tried to get Sophos client into the image (that is eventually sysprep'd)?

:628


This thread was automatically locked due to age.
Parents
  • 0

    Vojta,

    Technically you could do that, but your BOOT keys no longer be unique. While that may solve one problem, it could create another when you need to slave the drive for data recovery. Of course you can use WinPE or Lenovo RnR for data recovery making my point moot.

    There are also security counter measures to attacks on FDE encryption that we put into the installation which will be removed by imaging. If the installation was imaged before the SGNClient.msi did it's first reboot, you may be able to get away with it (with the same BOOT key). Once the system is up and into Windows, it will grab the security policies based on it's location in your Directory and then watch the drive spin. Technically it may work but I don't believe it's currently supported.

    :1143
Reply
  • 0

    Vojta,

    Technically you could do that, but your BOOT keys no longer be unique. While that may solve one problem, it could create another when you need to slave the drive for data recovery. Of course you can use WinPE or Lenovo RnR for data recovery making my point moot.

    There are also security counter measures to attacks on FDE encryption that we put into the installation which will be removed by imaging. If the installation was imaged before the SGNClient.msi did it's first reboot, you may be able to get away with it (with the same BOOT key). Once the system is up and into Windows, it will grab the security policies based on it's location in your Directory and then watch the drive spin. Technically it may work but I don't believe it's currently supported.

    :1143
Children
No Data
Unfiltered HTML