Connectwise RMM/ Sophos install Script

Question

Does anyone have a Script for ConnectWise RMM to install Sophos Endpoint? 
 
 We have used some of the other legacy scripts and attempted to convert it to Connectwise RMM but have been unsuccessful.

Ronnie Barreto · Accepted Answer

I have Figured it out. Your welcome to publish this. I ported another script, but figured out how CW RMM handles everything.

Connectwise RMM 
 Sophos Installer Script 
 
 Connectwise RMM Setup 
 
 Goto Settings &agrave; Custom Fields 
 Add Custom Fields - Click add
 
 Name = CustomerToken 
 Level=Company 
 Type=Text Box 
 Leave Default Value empty 
 Description = Sophos CustomerToken 
 Click Save 
 Name =ProductSelection 
 Level=Company 
 Type=Text Box 
 Leave Default Value empty 
 Description = Sophos CustomerToken 
 Click Save

Add Customer Information
 
 goto Client Management &agrave; Company Management 
 open Each Company and goto Custom Fields at the Top under the company name 
 Click on the edit icon and add the information accordingly
 
 CustomerToken is found on Sophos Partner Portal under deployment
 
 You can download the csv file of all your customers

ProductSelection &ndash; Set Product Selection based on each clients product
 
 CIXA
 
 Antivirus, Intercept

CIXAXDR
 
 Antivirus, Intercept, XDR

MDR
 
 mdr

ALL
 
 all

Encrypt
 
 Device Encryption

Create Script
 
 Goto Automation &agrave; Tasks 
 Click on Add and then select Script Editor 
 Set name to Sophos Iinstaller 
 Click on the Script Editor tab 
 On the First Row Select Function and then Set Pre-Defined Variable
 
 Variable Name = CustomerToken 
 Select Custom Field and Select CustomerToken

Add Row
 
 Variable Name = ProductSelection 
 Select Custom Field and Select ProductSelection

Add Row
 
 Variable Name = Name 
 Select System Variable and Select ClientId

Add Row
 
 Select Function - Script Log 
 Set Script log message
 
 %output$

Add Row
 
 Select Function then Powershell Script 
 Add the script ( see next page)

Save and save again

Add row
 
 Select Function - Script Log 
 Set Script log message
 
 %output$

# ----------------------------------------------------------------------------------------------- 
 # Component: Sophos Central Deployment for Windows 
 # Platform: CW RMM 
 # Purpose: Using the new Sophos Thin installer, 
 # perform default install of Sophos Central using the defined parameters 
 # Version 1.0 
 # ----------------------------------------------------------------------------------------------- 
 # Define Functions 
 
 function Get-SophosInstalled { 
 $Global:installed = (gp HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*).DisplayName -contains "Sophos Endpoint Agent" 
 $Global:mcsclient = Get-Service -name "Sophos MCS Client" -ea SilentlyContinue 
 $Global:mcsagent = Get-Service -name "Sophos MCS Agent" -ea SilentlyContinue 
 } 
 
 # Define Variables 
 
 $customertoken="@customertoken@" 
 $productselection="@productselection@" 
 $name=@name@ 
 # Sophos Central Installation

Write-Host "Starting the Sophos Central Installation based on the variables defined in the site" 
 Write-Host "" 
 Write-Host "Checking to see if Sophos is Already Installed" 
 
 Get-SophosInstalled 
 if ($installed -eq "True") { 
 Write-Host "--Sophos Central Endpoint Agent Installed" 
 if ($mcsclient.Status -eq "Running"){ 
 Write-Host "--Sophos MCS Client is Running" 
 Exit 0 
 } 
 } 
 else { 
 Write-Host "--Sophos Central is Not Installed" 
 Write-Host "Sophos MCS Client is Not Running" 
 } 
 
 # Check for the Site Variables 
 Write-Host "" 
 Write-Host "Checking the Variables" 
 
 if (!$CustomerToken) 
 {Write-Host "--Customer Token Not Set or Missing" 
 Exit 1} 
 else 
 {Write-Host "--CustomerToken = "$CustomerToken""} 
 
 #Pull Device OS Info for Workstation or Server Detection 
 
 $osInfo = Get-WmiObject -Class Win32_OperatingSystem 
 
 # Sophos Workstation Product Selection 
 if ($osInfo.ProductType -eq '1') { 
 if (!$ProductSelection) { 
 Write-Host "--Product Not Set or Missing" 
 Exit 1 
 } 
 elseif ($ProductSelection -eq 'CIXE') { 
 $Products = "antivirus,intercept" 
 } 
 elseif ($ProductSelection -eq 'CIXA') { 
 $Products = "antivirus,intercept" 
 } 
 elseif ($ProductSelection -eq 'CIXAXDR') { 
 $Products = "antivirus,intercept,xdr" 
 } 
 elseif ($ProductSelection -eq 'MDR') { 
 $Products = "antivirus,intercept,xdr,mdr" 
 } 
 elseif ($ProductSelection -eq 'ALL') { 
 $Products = "all" 
 } 
 elseif ($ProductSelection -eq 'Encrypt') { 
 $Products = "DeviceEncryption" 
 } 
 } 
 # Sophos Server Product Selection 
 else { 
 if (!$ProductSelection) { 
 Write-Host "--Product Not Set or Missing" 
 Exit 1 
 } 
 elseif ($ProductSelection -eq 'CIXE') { 
 $Products = "antivirus,intercept" 
 } 
 elseif ($ProductSelection -eq 'CIXA') { 
 $Products = "antivirus,intercept" 
 } 
 elseif ($ProductSelection -eq 'CIXAXDR') { 
 $Products = "antivirus,intercept,xdr" 
 } 
 elseif ($ProductSelection -eq 'MDR') { 
 $Products = "antivirus,intercept,xdr,mdr" 
 } 
 elseif ($ProductSelection -eq 'ALL') { 
 $Products = "all" 
 } 
 } 
 
 # Sophos parameters are defined from the site specific variables 
 
 $arguments = "--customertoken=""" + $CustomerToken + """ --epinstallerserver=" + """dzr-api-amzn-us-west-2-fa88.api-upe.p.hmr.sophos.com" 
 $arguments = $arguments + """ --products=""" + $Products 
 $arguments = $arguments + """ --quiet" 
 
 # Check to see if a previous SophosSetup Process is running 
 Write-Host "" 
 Write-Host "Checking to see if SophosSetup.exe is already running" 
 if ((get-process "sophossetup" -ea SilentlyContinue) -eq $Null){ 
 Write-Host "--SophosSetup Not Running" 
 } 
 else { 
 Write-Host "Sophos Currently Running, Will Kill the Process before Continuing" 
 Stop-Process -processname "sophossetup" 
 } 
 
 #Force PowerShell to use TLS 1.2 
 [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 
 
 #Check for Existing SophosSetup Installer 
 if ((Test-Path c:	emp\SophosSetup.exe) -eq "True"){ 
 Write-Host "--Removing the existing SophosSetup Installer" 
 Remove-Item -path c:	emp\SophosSetup.exe 
 } 
 # Check if c:	emp Exists if not create it 
 
 $directoryPath = "C:\temp" 
 if(-not (Test-Path $directoryPath)) 
 { 
 New-Item -ItemType Directory -Force -Path $directoryPath 
 Write-Host "Directory created" 
 } 
 else 
 { 
 Write-Host "Directory already exists" 
 } 
 
 # Download of the Central Customer Installer 
 Write-Host "" 
 Write-Host "Downloading Sophos Central Installer" 
 Invoke-WebRequest -Uri "">central.sophos.com/.../SophosSetup.exe" -OutFile c:	emp\SophosSetup.exe 
 if ((Test-Path c:	emp\SophosSetup.exe) -eq "True"){ 
 Write-Host "--Sophos Setup Installer Downloaded Successfully" 
 } 
 else { 
 Write-Host "--Sophos Central Installer Did Not Download - Please check Firewall or Web Filter" 
 Exit 1 
 } 
 
 # This Section starts the installer using the arguments defined above 
 Write-Host "" 
 Write-Host "Installing Sophos Central Endpoint:" 
 Write-Host "" 
 Write-Host "SophosSetup.exe "$arguments"" 
 Write-Host "" 
 
 start-process c:	emp\SophosSetup.exe $arguments

$timeout = new-timespan -Minutes 5 
 $install = [diagnostics.stopwatch]::StartNew() 
 while ($install.elapsed -lt $timeout){ 
 if ((Get-Service "Sophos MCS Client" -ea SilentlyContinue)){ 
 Write-Host "Sophos MCS Client Found - Breaking the Loop" 
 Break 
 } 
 start-sleep -seconds 60 
 } 
 Write-Host "" 
 Write-Host "Sophos Setup Completed" 
 
 # Verify that Sophos Central Endpoint Agent Installed 
 Write-Host "" 
 Write-Host "Verifying that Sophos Central Endpoint installed and is Running" 
 
 Get-SophosInstalled 
 if ($installed -eq "True") { 
 Write-Host "--Sophos Central Endpoint Agent Installed Successfully" 
 if ($mcsclient.Status -eq "Running"){ 
 Write-Host "--Sophos MCS Client is Running" 
 if ($mcsagent.Status -eq "Running"){ 
 Write-Host "" 
 Write-Host "--Sophos MCS Agent is Running" 
 Write-Host "" 
 Write-Host "Sophos Central Agent is Installed and Running" 
 Write-Host "" 
 Exit 0 
 } 
 } 
 } 
 else { 
 Write-Host "--Sophos Central Install Failed" 
 Write-Host "" 
 Write-Host "Please check the Sophos Central Install Logs for more details" 
 Write-Host "" 
 Write-Host "Log Location - <system>\programdata\Sophos\Cloudinstaller\Logs\" 
 Exit 1 
 }

Qoosh · Answer

If you are looking to deploy a script to Windows devices, installer command line options can be found on the following page. - Installer command-line options for Windows 
 You can also file a PS1 script in the following article. - Automate the software deployment to devices 
 $temp = "C:	emp\"
$SophosInstalled = Test-Path -Path "C:\Program Files\Sophos"
$InstallerSource = "your installer download link"
$destination = "$temp\SophosSetup.exe"

If ($SophosInstalled){
Write-Host "Sophos is already installed. "
Sleep 3
Exit
} Else {
Write-Host "Beginning the installation"

If (Test-Path -Path $temp -PathType Container){
Write-Host "$temp already exists" -ForegroundColor Red
} Else {
New-Item -Path $temp -ItemType directory
}

Invoke-WebRequest $InstallerSource -OutFile $destination
$WebClient = New-Object System.Net.WebClient
$webclient.DownloadFile($InstallerSource, $destination)
}

Start-Process -FilePath "$temp\SophosSetup.exe" -ArgumentList "--quiet" If you wish to script this differently, you can obtain the direct download URL for the installer using the steps in the following article. - Endpoint and Server installation methods > Installation via installer link 
 
 For MacOS devices, I suggest checking the contents of the installer download package, as this contains a bash script inside the "Deployment Tools" folder. 
 
 You can also reach out to Sophos Profesional services if you'd like more hands-on assistance with your environment and deployment tools.

Connectwise RMM/ Sophos install Script

Top Replies