This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Prevent Firewall from being installed

I created a deployment package that doesn't include the sophos firewall and I point it to the my local update servers for updates. When the client updates it installs the firewall. There are a few computers that I need to prevent the firewall from being installed on the machine. Is there a way to do this? (not just allow all traffic)

Thank you

:49670


This thread was automatically locked due to age.
  • Hello JBVO,

    the firewall doesn't happen to be installed, nor is it installed by default. If setup.exe is run with the -scf parameter AutoUpdate will attempt to download and install SCF. In other words, preventing SCF installation is simply not requesting it in the first place. How did you create your package?

    Christian
    :49674
  • I created the package by using the DeploymentPackger executable. I did not select the firewall to be installed. I have it pointed to the CID and subscription along with the update location. After I install Sophos on the endpoint the firwall is not installed but if I click on update now it installs the firewall. Could it be due to our subscrition features (all of them included the firewall)?

    :49680
  • Hi,

    AutoUpdate knows to download and install SCF, based on the SCF GUID key under:

    HKEY_LOCAL_MACHINE\SOFTWARE\[Wow6432Node]\Sophos\AutoUpdate\Products\

    If you flick through them you will see one for SCF.

    This "registration" of a product in SAU is set, as one example, when setup.exe is run with the -scf switch.

    I would be interested to know what command line is being run to perform the installation or how the SCF key is set.

    Regards,

    Jak

    :49682