Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Need Docs for Linux EDR

Ive installed Central EDR linux but its file structure and cmd's are different to Central Linux, Is there a pdf around with the updated cmds for linux edr pls??  I cant run manual tasks with EDR installed as the file names and locations have all changed.

Thanks

JK



This thread was automatically locked due to age.
Parents
  • Hi JK,

    The documentation is in Central Help, which tasks are you trying to run? 

    This is a brand new product with a new architecture, and so other than the install location still being in /opt/ the sub directories have all changed.

    Regards,

    Stephen

  • Hi Stephen,

     

    I did look on the help pages but it is CLI stuff i need to do which doesnt seem to be in the online docs yet as the SAV commands didnt work, but what im trying to do and still waiting for my ticket to be resolved relating to this is that I have EDR for linux installed ok and its shown on Central portal but ive got the issue where by that its real time protection module doesnt appear to be running and both columns on Central for installed modules are showing an X, granted the X for Intercept X is normal but not so much the X for Endpoint software.  So I assumed that was related to the real time protection problem of which id resolved once before on the non EDR edition which was when i discovered all the file / folder / cmd structure had changed hence my request for docs relating to EDR for linux.  Sorry I probably should have mentioned i needed CLI docs for EDR.

     

    Can you help, Support says they need remote session to fix but im hopping you can provide cmd'd i need relating for how the old Linux edition has its kb article for real time protection but for EDR this time?

     

    Thanks,

    JK

  • Hi John,

    The new Sophos agent that we've built for Linux EDR does not have an AV component, we are looking to add this later this year. So the policy and configuration options for on-access scanning are not currently relevant to the EDR agent, on the SAV for Linux product. 

    I hope this helps.

    Regards,

    Stephen

Reply
  • Hi John,

    The new Sophos agent that we've built for Linux EDR does not have an AV component, we are looking to add this later this year. So the policy and configuration options for on-access scanning are not currently relevant to the EDR agent, on the SAV for Linux product. 

    I hope this helps.

    Regards,

    Stephen

Children