Hello,
a problem that's bugging me for some time now is how to ensure that the endpoints will get recent AV definitions immediately after start-up. We see that some endpoints get AV definitions delayed by up to one hour - which is way too much if someone gets back from a holiday or training. First thing to do for most users as soon as they get back to the office is to try everything they've got during their training (USB is locked anyways...).
If someone has been away for a week of more, this delay is not acceptable.
Sophos support was of no help here, UTM support told that this is an EP problem, EP support told that this is a UTM problem.
First update should start 5 minutes after service start. That obviously doesn't work. Registry settings just change the update interval, but the previously existing flag for "update as soon as internet access is available" is greyed out and not available even after completely unlocking tamper protection and searching in registry.
A few days ago they promised us that the problem would be fixed with 9.2 (which I'm currently testing in lab), because of "more options to control the endpoints". I don't see much difference to 9.1xx, and it's definitely impossible to force the first update to happen earlier.
Maybe someone of you has already experience with Endpoint Security without UTM and knows about some hidden settings or things we could try?
Regards,
SM
This thread was automatically locked due to age.
Guest User!
You are not Sophos Staff.
