Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 1074 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Updating question

apeeler

We have the SEC 5.0.0.8 and endpoints are all on 10.0. I have noticed it is pushing out updates almost everyday. Updating can be a problem for our network so i need to manage these on my own.

Why have i been seing and noticing large updates lately?

:37881


This thread was automatically locked due to age.
  • 0

    Hello apeeler,

    an minor update (e.g. 10.0.x to 10.0.[x+1]) re-issues the detection data (VDL and IDE - library and individual detections) and might also contain software updates of one or more components. These updates occur monthly. IDEs are added frequently (usually several times per day) but are rather small (several 10k at most). 

    i need to manage these on my own

    You can set an interval (from 5 to 1440 minutes) for IDE updates (but I'd suggest you leave it at 10 minutes) and you can specify either an interval or a schedule for the larger ("software") updates (you can even effectively disable them - in this case you'd have to manually request an update). Once SUM has updated the software clients will download them the next time they check for updates (note that on the clients you can't treat IDE and software updates differently and you can only set an interval, not a schedule). BTW - SEC isn't pushing (in the sense of pushing them to the clients, it's just pushing them to the share) updates, it's the clients fetching them from the CID.

    HTH

    Christian

    :37895
  • 0

    thanks for your response. we have had sophos for 3 years now....in the past few weeks i have seen more updates than ever. Is there a reason for this?

    :37915