Sophos Endpoint

Discussions Lockdown feature - questions about use

Sophos Endpoint requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 3 replies
Subscribers 9 subscribers
Views 355 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Lockdown feature - questions about use

Parag Shukla over 2 years ago

Hi Team,

we're planning to use Lockdown on Windows Servers with intercept-X installed.

I have some general questions about that feature.

Will the lockdown feature affect automatic upgrades from SCCM?
What will the effect be if a program/task start a different process etc.

This thread was automatically locked due to age.

Parents

0 Qoosh over 2 years ago

Hi Parag,

Thanks for reaching out to the Sophos Community Forum.

Could you elaborate on what sort of tasks you will be performing on the Server using SCCM?

If one process runs on the server to execute a new process, if the new process is not excluded it may not be permitted to run.

I suggest checking out the following articles as well to see if this helps better explain.
- Server Lockdown Frequently Asked Questions
- Server Lockdown known issues
- Applications that need manual Lockdown policy changes

In general Server Lockdown is only recommended for systems which will not require much user-interaction or systems where changes will not be applied very frequently.

Please note, Server Lockdown will no longer work on Server 2012/2012 R2 after October 10th 2023. Protection on these OS' will require you to have an extended support license, however, Server Lockdown will no longer be available on these OS'.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Qoosh over 2 years ago

Hi Parag,

Thanks for reaching out to the Sophos Community Forum.

Could you elaborate on what sort of tasks you will be performing on the Server using SCCM?

If one process runs on the server to execute a new process, if the new process is not excluded it may not be permitted to run.

I suggest checking out the following articles as well to see if this helps better explain.
- Server Lockdown Frequently Asked Questions
- Server Lockdown known issues
- Applications that need manual Lockdown policy changes

In general Server Lockdown is only recommended for systems which will not require much user-interaction or systems where changes will not be applied very frequently.

Please note, Server Lockdown will no longer work on Server 2012/2012 R2 after October 10th 2023. Protection on these OS' will require you to have an extended support license, however, Server Lockdown will no longer be available on these OS'.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Parag Shukla over 2 years ago in reply to Qoosh

HiQoosh,

Could you elaborate on what sort of tasks you will be performing on the Server using SCCM?

Yes , in SCCM side like monthly patch updated or OS upgrade.
Cancel
Vote Up 0 Vote Down

Cancel
0 Qoosh over 2 years ago in reply to Parag Shukla

An OS upgrade would cause the sytem to undergo significant changes. Server Lockdown is not intended for such systems. While some minor Windows Updates may succeed, any significant changes may require you to unlock the system prior to upgrading.

I suggest also checking Steps required if doing a Windows Update before locking a server.
Cancel
Vote Up 0 Vote Down

Cancel