about relay and cache server

Hello Nyein Chan Zaw 

We appreciate your reaching out to the Sophos Community Forum.

So, that device will communicate with Sophos Central through a message relay if sophos is installed.

Also, please refer to this information. It’ll help you to get more ideas on Update cache and Message Relay:

Sophos Update Cache enables devices to get their Sophos updates from a cache device in the network and directly from Sophos. This saves bandwidth because updates are downloaded only once by the cache device.
 

A Message Relay enables your devices to communicate all policy and reporting data via a central server. This can be used if you don’t have internet-facing devices, as all traffic will go via the Message Relay.

Please refer to this article: https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/GlobalSettings/UpdateCaches/index.html.

Regards, 

Hi Rutvik,

      I already finished the setup of relay and cache on window server and it showing at in sophos central but i cannot install sophos package to offline linux server it showing not connect with any server.

Hello Nyein Chan Zaw 

Thank you for the update.

Please refer to this information:

1. Ensure the Message Relay server is correctly set up and has the Update Cache component installed with all updates. For more information, see Sophos Central Server: Update Cache and Message Relay FAQs.
2. Confirm that Sophos Central Admin: Domains and ports to allow between the server and the client are properly configured.
3. Sign in to Sophos Central Admin.
4. Go to Protect Devices, then click Download Linux Server Installer under Server Protection.
5. Copy the Linux installer. SophosInstall.sh to a working directory on your concerned Linux computer.
6. Ensure the directory /opt/sophos-av Is clear of any previous Sophos installation folders or files.
7. Once you run, the Sophos installer will look for the Message Relay or Update Cache server. ./SophosInstall.sh.

Note: No installer parameters are required for Linux-based installations.  

Please refer to this article: https://support.sophos.com/support/s/article/KB-000039204?language=en_US.

Regards,

Hi Rutvik,

   Thanks for your support and for offline linux server side. I just need to install the sophos EP package right and this server can ping to sophos relay window server it ok right ? If there need any configurations between both server ?

Hello Nyein Chan Zaw 

You’re welcome. There’s no need to configure anything after that. Make sure that they belong to the same network and can communicate with each other. Yup, correct. You need to install the sophos EP. Let me know how it goes.   

Regards, 

Hi Rutvik, 

   I already installed sophos EP on this offline linux server and how can i know it sync with Central via relay server ? 

Coz i did not see in sophos central for new clinet.

Hello Nyein Chan Zaw 

Thank you for the update. 

Please refer to these commands to verify if updates are relayed from the Update Cache server; run the below command from a terminal: "grep 8191 /opt/sophos-av/logs/savupdate-debug.log"  Note: Don't add this ("") while running the commands on the terminal. 

Once the installation is complete, go to /opt/sophos-av/bin then run ./savupdate

Please refer to this article step number 8 and 9 for refernce: https://support.sophos.com/support/s/article/KB-000039204?language=en_US.

Regards, 

I'm afraid those are the instructions for Sophos Anti-Virus for Linux (retired), not for Sophos Protection for Linux (current Linux agent).

If you do a clean installation of SPL after setting up the Message Relay / Update Cache on your account, the installation should use the Message Relay and Update Cache immediately, and the machine will not need a direct internet connection.

If you have an existing installation, it will require direct access to Sophos Central, in order to receive policies with the new Update Cache and Message Relay configuration before they can be used.

You must ensure that the Linux endpoint can access the Message Relay and Update Cache on their configured ports, in order for them to be used.