Sophos Central Thin Installer Script Setup (labtech) 6b223o

Sophos Central Thin Installer Script Setup (Labtech)

This document will walk you through importing the Sophos Central Thin Installer Script and setting up the Monitor to automatically check to ensure that Sophos is installed on the workstations for that client.

First the Sophos Thin Installer from the Partner Portal Click on the Deployment section from the left menu.

Sophos Central Thin Installer Script Setup (Labtech)

Page 1

Sophos Central Thin Installer Script Setup (Labtech)

Then click the Endpoint Installer to the SophosSetup.exe

Put the SophosSetup.exe in the LTShare\Transfer\Packages folder. If you don't have a Packages folder, just create one.

Sophos Central Thin Installer Script Setup (Labtech)

Page 2

Sophos Central Thin Installer Script Setup (Labtech)

Next you need to import the XML File into Labtech Click on Tools, Import and then LT XML Expansion

Sophos Central Thin Installer Script Setup (Labtech)

Page 3

Sophos Central Thin Installer Script Setup (Labtech)

Find the XML File and click Open

Click Yes to accept that the Import will create new items if they already exist.

Sophos Central Thin Installer Script Setup (Labtech)

Page 4

Sophos Central Thin Installer Script Setup (Labtech)

the Script Imported You can find the New Sophos Central script under Scripts, Antivirus, Sophos

Sophos Central Thin Installer Script Setup (Labtech)

Page 5

Sophos Central Thin Installer Script Setup (Labtech)

Next we'll that the EDF Tab and Fields were created. Expand the Clients and double Click on a Client.

Every client will now have this field. This is where you will select that Sophos is to be deployed to this Customer and where you will fill in the Central Token, Central Products, and Central Location. All of this is pulled from the CSV file in your Sophos Central Partner Dashboard. If any one of these fields are missing the script will exit with an error telling you that the section was missing. Sophos Central Products There are a few different options for this field. This is important because it will direct the Agent on which components need to be installed. The options are as follows: • antivirus - This indicates that you want Endpoint Advanced or Standard depending on the license selected under Licensing. • intercept - This indicates that you want Intercept X • deviceencryption - This indicates that you want Device Encryption • all This indicates that you want to install all three components ***For Termed licenses, all will only install the components available on the License ID***

Sophos Central Thin Installer Script Setup (Labtech)

Page 6

Sophos Central Thin Installer Script Setup (Labtech)

These can be combined as well with a comma. So if you wanted Endpoint and Intercept it would be antivirus,intercept

Sophos Central Thin Installer Script Setup (Labtech)

Page 7

Sophos Central Thin Installer Script Setup (Labtech)

Next setup the Monitor to look for AV Missing and then install Sophos Central

Sophos Central Thin Installer Script Setup (Labtech)

Page 8

Sophos Central Thin Installer Script Setup (Labtech)

Change the run time to every hour to ensure that you catch machines when they're online that are missing Sophos Central

Sophos Central Thin Installer Script Setup (Labtech)

Page 9

Sophos Central Thin Installer Script Setup (Labtech)

Click on the Alerting Tab and then click on Create a New Template

Sophos Central Thin Installer Script Setup (Labtech)

Page 10

Sophos Central Thin Installer Script Setup (Labtech)

Enter the Name of the Alert Template and a Comment for this Alert Template. Next Click Add Alerts

Click on New Alert

Sophos Central Thin Installer Script Setup (Labtech)

Page 11

Sophos Central Thin Installer Script Setup (Labtech)

Scroll down to Script and Check both Warning and Error. Then for Script Action, click the Drop Down and find the Antivirus\Sophos\Deploy Sophos Central Thin Installer (Token) Then Check Everyday and on the just select the Location Click Save

Sophos Central Thin Installer Script Setup (Labtech)

Page 12

Sophos Central Thin Installer Script Setup (Labtech)

Click the Select an Alert Template and find the Sophos MIssing Then Click Save

Congrats, you've setup the Sophos Central Thin Installer Script and Monitor. The script can be manually deployed in Labtech during an initial install, but will be monitor hourly to ensure that existing and new workstation get the Sophos Central Endpoint Agent.

Sophos Central Thin Installer Script Setup (Labtech)

Page 13

Sophos Central Thin Installer Script Setup (Labtech)

Updating the Virus Definitions for Sophos Central In Automate/Labtech, Click on the Dashboard - Config - Configurations - Virus Scan

Next you will add two new definitions with the following details. Name: Sophos Central Endpoint 32bit Program Location: "{%-HKLM\SOFTWARE\Sophos\SAVService\Application:Path-%}sav32cli.exe" Definition Location: {%-HKLM\SOFTWARE\Sophos\autoupdate:data path-%}data\status\ SophosUpdateStatus.xml Update Command:"{%-HKLM\SOFTWARE\Sophos\SAVService:Path-%}ALUpdate.exe" AP Process: saveservice* OS Type: 32bit Windows

Sophos Central Thin Installer Script Setup (Labtech)

Page 14

Sophos Central Thin Installer Script Setup (Labtech)

Then Click Save

Next you will add two new definitions with the following details. Name: Sophos Central Endpoint 64bit Program Location: "{%-HKLM\SOFTWARE\wow6432node\Sophos\SAVService\Application:Path%}sav32cli.exe" Definition Location: {%-HKLM\SOFTWARE\wow6432node\Sophos\autoupdate:data path-%}data\status\ Status.xml Update Command: "{%-HKLM\SOFTWARE\wow6432node\Sophos\AutoUpdate:Installation Path%}ALUpdate.exe" AP Process: saveservice* OS Type: 64bit Windows Then Click Save

Sophos Central Thin Installer Script Setup (Labtech)

Page 15