This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Best way to update SEC on a stand alone network?

I have a network for some security related hardware which is to have Sophos installed on all devices. The network in question will not have access to the internet and there are no options to enable such access. I have SEC installed on a server and it will allow the devices with Sophos to update from it, but obviously it can’t download the updates to share.

What is the best way to manually add new IDE’s to the SEC for automated distribution to the Endpoint?

This thread was automatically locked due to age.

Parents

0 QC over 7 years ago

Hello Mark Jackson,

the dedicated SESC - Enterprise Console would be the appropriate forum (and there are several applicable threads there) and much better than General.
Anyway, please see Sophos Update Manager: Install and configure Endpoint security and control on air gapped network. SEC and endpoints are already installed so it is just a question of correctly configuring (and regularly refreshing) the update Source.

Christian
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 QC over 7 years ago

Hello Mark Jackson,

the dedicated SESC - Enterprise Console would be the appropriate forum (and there are several applicable threads there) and much better than General.
Anyway, please see Sophos Update Manager: Install and configure Endpoint security and control on air gapped network. SEC and endpoints are already installed so it is just a question of correctly configuring (and regularly refreshing) the update Source.

Christian
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Mark Jackson over 7 years ago in reply to QC

Thanks, I'll have a look now.

Does "air gapped network" mean a network not connected to a wider network/internet?
Cancel
Vote Up 0 Vote Down

Cancel
0 QC over 7 years ago in reply to Mark Jackson

Hello Mark Jackson,

yes. Please note that the subscriptions on the SEC/SUM with a connection to Sophos determine which product versions are available on your air-gapped SUM.

Christian
Cancel
Vote Up 0 Vote Down

Cancel
0 Mark Jackson over 7 years ago in reply to QC

Thanks, I've seen the term "air gapped" a few times but never assumed it meant an isolated network - it seems a bad choice of words when we live in a wireless world.
Cancel
Vote Up 0 Vote Down

Cancel
0 QC over 7 years ago in reply to Mark Jackson

Hello Mark Jackson,

"air gapped" [...] seems a bad choice of words when we live in a wireless world
like ethernet for a bunch of cables [;)]? There wasn't any wireless networking worth mentioning when the term was coined. And core dump is still alive even though magnetic rings fell out of use in the 70s of the last century of the previous millennium. Would isolated be better?

Christian
Cancel
Vote Up 0 Vote Down

Cancel
0 Mark Jackson over 7 years ago in reply to QC

I’m not sure “isolated” would fully clarify the situation as it could be described as isolated if behind a firewall or NAT router. Maybe “stand alone network” or “separate network” would help clarify.
Cancel
Vote Up 0 Vote Down

Cancel