Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 2241 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos clients updating

Luka

Hi to all and thanks for any help.

I have deployed Sophos AntiVirus and Data control on more than 100 machines. Most of them work all the time.

Is there any way to set the client computers to check for updates at exact time?

As far as I see, only thing I can change is the interval for checking for updates.

Is there any way  to set this valuu to fix time, lets say 02:30?

Regards,

Luka

:18889


This thread was automatically locked due to age.
  • 0

    Hello Luka,

    may I ask why you want to set an exact time? Where's the problem with the interval?

    Christian

    :18893
  • 0

    Hi,

    There isn't a way to to it in the product as such but you could try:

    1. performing the following registry key change: http://www.sophos.com/support/knowledgebase/article/27646.html to prevent AutoUpdate performing an update after the AutoUpdate service starts.

    2. Disable schedule updating in the policy or client if unmanaged.

    3. Poke AutoUpdate into calling update now at the time required possibly with a Windows scheduled task.  This can be done with a simple piece of VBScript as per: http://www.sophos.com/support/knowledgebase/article/36262.html 

    Set objALC = CreateObject("ActiveLinkClient.ClientUpdate.1")
objALC.UpdateNow 1,1

     You would then need to schedule this at the times required on the clients.  To do so: /search?q= 9891 might give you a few ideas on how to roll out a scheduled task. 

    I would suggest that any script to call an update should reset the registry key mentioned in point 1, to ensure it is preserved on updates.  You may still get one update not at the time of the scheduled task if AutoUpdate updates itself, removes the key and then would perform an update at startup of the service.

    Hope that helps.

    Regards,

    Jak

    :18897
  • 0

    We have a large number of computers and some of them are occasionally turned off and during the day switch on again.

    I don't want to have my network congested during the day when people work. I have several computer groups and would like t configure them to check for updates at 02:00 or 02:30 no meter when they were switched on or off.

    Is there a way to code something into the configuration file on the client?

    :18913
  • 0

    Jak,

    Thanks for replay.

    If I understand you correctly, when I change the registry key from the step 1. and force the update at, let say 02:00, and my client computers are set to check for updates every 1440 min, then the clients would check for update each day at 02:00, no matter when they were switched on or off.

    :18915
  • 0
    Hello Luka,

    updates - except for the monthly VDL or the version updates - are small, not more than a few kB, Sophos issues these IDE updates several times a day if necessary. They won't congest your network. As Sophos labs update these IDEs within hours if a new threat is found, updating just once a day could mean that your computers - unnecessarily - run almost a whole day without the latest protection. If you've ever encountered a new threat which your users were likely to pick up and you've seen what frequent updates can do for protection you'll think at least thrice ...
    Version ("software" as opposed to "threat detection data") updates are another thing - you control them via the SUM settings, not on the clients.
    Last but not least, updating requires the computer to be running. Neither does the client schedule a BIOS wakeup not does SEC a WOL. But as I said, you are likely better off with more or less frequent automatic updates.

    Christian
    :18917