Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 765 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos FW failed to deploy

ronaldrose

Hi,

We have some laptops needs to install Sophos firewall, while we tried to protect them from Enterprise Console, all components are installed except firewall.

Finally we installed firewall on one machine, we install from Sophos Server file sharing path to install. and firewall installed successfully. We have many laptops to install, is there any better way to achieve this without manually install?

Thanks

:20559


This thread was automatically locked due to age.
Parents
  • 0

    HI,

    When you choose the firewall component in the protection wizard, the command the management service runs on the client (creates a scheduled task on the client) should have the -scf switch as per http://www.sophos.com/support/knowledgebase/article/12570.html .

    The command line switch to setup.exe in effect just adds the following registry key on the client:
    [HKEY_LOCAL_MACHINE\SOFTWARE\[wow6432node]\Sophos\AutoUpdate\Products \{4DB41E90-DC56-41DC-B91E-9B8E537489A8}]

    "CidFolderPath"="scf"

    "ProductName"="Sophos Client Firewall"

    This tells AutoUpdate to download and install the firewall component.  Which it would do on the next download.

    You can do the same with Patch (SAV 10 with a Patch license) as per: http://www.sophos.com/support/knowledgebase/article/113976.html .

    I'm surprised that when you go through the deployment wizard, if it doesn't complain that you can't install the firewall, for example you are selecting a server based OS, etc.. That it doesn't do as above.  You could check that the created scheduled task on the client is getting the -scf switch passed, if not, at least you know the problem is with the server creating the task with the right switches.

    I suppose, if you find it easy, you could add the above registry keys on the client.  Hope that helps.

    Regards,

    Jak 

    :20563
Reply
  • 0

    HI,

    When you choose the firewall component in the protection wizard, the command the management service runs on the client (creates a scheduled task on the client) should have the -scf switch as per http://www.sophos.com/support/knowledgebase/article/12570.html .

    The command line switch to setup.exe in effect just adds the following registry key on the client:
    [HKEY_LOCAL_MACHINE\SOFTWARE\[wow6432node]\Sophos\AutoUpdate\Products \{4DB41E90-DC56-41DC-B91E-9B8E537489A8}]

    "CidFolderPath"="scf"

    "ProductName"="Sophos Client Firewall"

    This tells AutoUpdate to download and install the firewall component.  Which it would do on the next download.

    You can do the same with Patch (SAV 10 with a Patch license) as per: http://www.sophos.com/support/knowledgebase/article/113976.html .

    I'm surprised that when you go through the deployment wizard, if it doesn't complain that you can't install the firewall, for example you are selecting a server based OS, etc.. That it doesn't do as above.  You could check that the created scheduled task on the client is getting the -scf switch passed, if not, at least you know the problem is with the server creating the task with the right switches.

    I suppose, if you find it easy, you could add the above registry keys on the client.  Hope that helps.

    Regards,

    Jak 

    :20563
Children
No Data