Solution for keeping an isolated linux machine with no network up to date

Hi Callum Finnamore 

Would you please confirm if you are managing the endpoint from Enterprise console? Also, please take a look at this Sophos Anti-Virus Linux configuration guide? You can check under the section to configure the update server. 

Hi Shweta,

We don't have a product yet and the testing I have done so far has been using the free version of SAV for Linux. We are looking for a solution to carry out on demand scans on an offline machine that we can also reasonably easily keep up to date.

Section 13.5 about configuring the client to update is what I want, but is not clear on whether I can update from a local directory. Is this possible?

Hi Callum Finnamore 

The version configuration guide is Sophos Enterprise Console(SEC). In SEC, you have Sophos update manager as a component which is responsible to update the clients in your corporate network irrespective of the client operating system. The machine where Sophos update manager is installed should have internet, so it can download the update files and then client machines can fetch the data from the Sophos update manager to update them selves without internet connection.

You can download the guide of the Sophos Enterprise console from here.

Hi Jasmin,

It is not possible for the machine to have any network connectivity at all, so it will not be able to get updates directly from a Sophos Update Manager connected to the internet. To update this one machine we have to use a USB with updates on. Is it possible to copy the virus definition updates from a SUM component to USB and then to the machine?

Hi Callum Finnamore 

Seems to be you want to install the product in the airgap network, please refer to this article which procedure for the Airgap networks.

Just a note, in airgap network, multiple features, policies will not work as the endpoint will not be able to communicate to SEC.

Hi Callum Finnamore 

Seems to be you want to install the product in the airgap network, please refer to this article which procedure for the Airgap networks.

Just a note, in airgap network, multiple features, policies will not work as the endpoint will not be able to communicate to SEC.