How to deploy Sophos XDR endpoint protection and antivirus in offline environments？

Hello, Hongbo Xia,

We appreciate your reaching out to the Sophos Community Forum.

So yes, you can set up an update cache and message relay for this kind of setup. 

• Sophos Update Cache: Setting up an update cache involves installing Sophos caching software, fetching updates from Sophos, and storing them in a cache. This cache allows computers in your network to get updates, saving bandwidth by downloading updates only once. You can manually assign computers to use a specific cache or relay for updating. To set up an update cache, you must ensure that the device meets the requirements, such as running Windows 10 or later, having at least 5GB of free disk space, and ensuring that port 8191 is available and accessible for computers to update from the cache.
• Message Relay: A message relay is a feature that allows computers to communicate indirectly with Sophos Central. When you set up a message relay, computers will send and receive updates through the relay instead of directly communicating with Sophos Central. This can be useful in environments where direct communication isn’t possible or efficient. To set up a message relay, you need a device running Windows Server 2008 R2 or later with at least 5GB of free disk space. The device must have port 8190 available and accessible for computers to use the relay. Once set up, the relay will facilitate communication between computers and Sophos Central, improving efficiency and network performance.
• Please refer to these articles for more in-depth information regarding Message Relay and Update Cache. 
• https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/GlobalSettings/UpdateCaches/index.html
• https://support.sophos.com/support/s/article/KBA-000003548?language=en_US

Let us know if you need any further help. 

Regards, 

Hello Rutvik，

Thank you for your reply. I have another question. With the solution you provided, can the terminal device receive instructions from Central, such as web control delivery, scanning task delivery, etc.?

Hello Hongbo Xia 

You’re welcome. So, yes, it’ll receive. Since an update cache and message relay is to make an online package/installer, the update becomes offline by storing it on the server. From there, all endpoints connected to the server for updating will grab updates like web control and scanning tasks instead of via the internet.

Let me know if you need any further help. 

Regards, 

Hello Hongbo Xia 

You’re welcome. So, yes, it’ll receive. Since an update cache and message relay is to make an online package/installer, the update becomes offline by storing it on the server. From there, all endpoints connected to the server for updating will grab updates like web control and scanning tasks instead of via the internet.

Let me know if you need any further help. 

Regards,