Do you have a server installed you could setup an update cache?

Are they all on the same network?

I can do that but that will only help conserve bandwidth for updates. I am looking for something to help with the initial install of over 300 clients.

Which installer are you running?  The newer SophosSetup.exe or SophosInstall.exe?

Details on the new SophosSetup.exe are here: https://community.sophos.com/kb/en-us/127045.  

If you look at the log file for the new installer, e.g.
C:\ProgramData\Sophos\CloudInstaller\Logs\SophosCloudInstaller_20180120_115125.log
In my log I see:
"2018-01-20T11:51:37.5112880Z INFO : No update caches configured"

I was helping in this thread:
https://community.sophos.com/products/sophos-central/f/sophos-central/99913/sophos-endpoint-protection-fails-with-checksum-error
You can see reference to it using the update cache.

If you have an update cache running, maybe run SohosSetup.exe and check the above log to see if it finds your update cache.

Regards,

Jak

I am setting up a sever with update cache now. Will let you know if that works.

I just saw in another forum where other users are in the same boat and have received an official reply from Sophos that there is no solution. :-( 

community.sophos.com/.../363628

I am confident they will eventually come up with an installer as every new enterprise customer is going to ask for this feature.

In the meantime I guess I will continue to install on a handful of clients at a time.

Thanks anyway for your help Jak.

If anyone else is looking for this answer, feel free to comment so this issue can receive the attention thats needed.

Full install would be handy.  We have sites with slow internet and the install takes a lot longer then 10 minutes.

The new installer will use the Update Cache during the install. The old installer only used the cache once the Endpoint was installed. If you tail the installer log you can watch it choose the Update Cache.

The installer log should look something like this

2018-01-27T08:57:57.3852599Z INFO : Analyzing whether to update from Sophos CDN or update cache
2018-01-27T08:57:57.3852599Z INFO : Checking access to update cache: mc-sgni.ukaws.co.uk:8191
2018-01-27T08:57:57.3852599Z INFO : Updating configured to use: HTTPS
2018-01-27T08:57:57.3852599Z INFO : Update Cache Cert Path folder: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2018-01-27T08:57:57.5258851Z INFO : Successfully connected to cache
2018-01-27T08:57:57.5258851Z INFO : Cache response time: 85ms
2018-01-27T08:57:57.5258851Z INFO : Analysis complete - Using update cache: mc-sgni.ukaws.co.uk:8191
2018-01-27T08:57:57.5258851Z INFO : Updating from cache: mc-sgni.ukaws.co.uk:8191
2018-01-27T08:57:57.5258851Z INFO : Updating configured to use: HTTPS

Hope that helps.

I have set up an update cache server but having trouble pulling down updates, verified everything working and agent is updating just failing to pull down the cache. Restarted server and also the service in services.msc. I'm going to let that simmer overnight and hopefully when I come in tomorrow I'll be ready to test.

Thanks again for the tip can't wait to try it!

If you run this command - Get-Content "c:\programdata\sophos\UpdateCache\Logs\uc.log" -wait | where { $_ -match “State changing” }

You should see - [2017-09-10T17:57:37Z] [cfc] Info: [StateMachine::Run:53] State changing initial_download -> active

Hope this helps.

Looks like the cache server did indeed solve the problem! Thanks all for the suggestion!

Charlie, were you looking at getting updates or the initial installer being pulled from it instead of the internet cache?

I've installed the local update cache but had no success in having the installer pull from it, and instead it sill pull data from the internet. I keep maxing out my internet pipe trying to install it. Complaining just because it is very inefficient way to install it.

Any thoughts?

Charlie, were you looking at getting updates or the initial installer being pulled from it instead of the internet cache?

I've installed the local update cache but had no success in having the installer pull from it, and instead it sill pull data from the internet. I keep maxing out my internet pipe trying to install it. Complaining just because it is very inefficient way to install it.

Any thoughts?

Are you sure you are using the Thin Installer? It should be called SophosSetup.exe. Also make sure the Endpoint can connect to Update Cache on 8191.

community.sophos.com/.../122577