Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 3098 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos on file servers

b3ta

Hi,

We currently use Sophos Endpoint 10 to secure our workstations and I would like to start rolling out across our server infrastructure as well but I don't want to affect the performance of our servers, especially the file servers.  Are there any guidelines for setting server policy?  Or has anyone used Sophos on their servers that can share any stories?

Thanks for any help.

Ben.

:22123


This thread was automatically locked due to age.
Parents
  • 0

    HI,

    If these are to be fresh installations of SAV 10 rather than upgrades from, say 9.7 the configurations will be different.  For example, a fresh install of SAV 10 will enable 0n-read, on-write and on-rename scanning:

    http://www.sophos.com/support/knowledgebase/article/114345.html

    I would suggest to be safe it is better to start light and then build up.  For example, install SAV, with maybe just on-read scanning.  See how that runs for a week, then maybe consider enabling on-write, then add on-rename.  If people complain or notice a difference at least you have a good idea what caused it.

    Same goes for other options like behaviour scanning.  Introduce options slowly over time is perhaps a safer approach than turn everything on from the start, have problems and then wonder what to start turning off.

    There are always exclusions but they should be considered on a per server role basis I guess.

    Regards,

    Jak

    :22137
Reply
  • 0

    HI,

    If these are to be fresh installations of SAV 10 rather than upgrades from, say 9.7 the configurations will be different.  For example, a fresh install of SAV 10 will enable 0n-read, on-write and on-rename scanning:

    http://www.sophos.com/support/knowledgebase/article/114345.html

    I would suggest to be safe it is better to start light and then build up.  For example, install SAV, with maybe just on-read scanning.  See how that runs for a week, then maybe consider enabling on-write, then add on-rename.  If people complain or notice a difference at least you have a good idea what caused it.

    Same goes for other options like behaviour scanning.  Introduce options slowly over time is perhaps a safer approach than turn everything on from the start, have problems and then wonder what to start turning off.

    There are always exclusions but they should be considered on a per server role basis I guess.

    Regards,

    Jak

    :22137
Children
No Data