Sophos Protection for Linux - AV signatures updates

Hello, Cody Chan,

We appreciate your reaching out to the Sophos Community Forum.

• You don't need to manually update AV signatures for a Sophos malware scan. It automatically updates its virus definitions regularly through Sophos Central, meaning new signatures are downloaded and applied automatically to your devices. For command line updates. So, I would like to say that the latest update is installed on the device when you install sophos. If you still need to update it manually, you can use this command: systemctl start sophos-spl-update
• Please refer to this article for more information: 
• docs.sophos.com/.../index.html

Hi Rutvik Chavda,

Thank you for your help. How to verify the new signatures are downloaded and applied to the devices on Sophos Central and the agent command line?

Hello Cody Chan, 

• To verify new signatures are downloaded and applied to devices with Sophos Protection for Linux (SPL) on Sophos Central, you can:
  Check the device status in Sophos Central:
• Log in to Sophos Central.
• Navigate to "Devices" and select the specific device you want to check.
• Look for an "update" or "last update" timestamp on the device details page. 
• You can refer to this article for more information on the SPL(Sophos Protection for Linux) version with the latest updates: 
• https://docs.sophos.com/releasenotes/index.html?productGroupID=esg&productID=linux_protection&versionID=Agent
• Please refer to this article if that helps you to check the latest signatures applied on the device via the command line: 
• https://support.sophos.com/support/s/article/KBA-000007858?language=en_US

Regards, 

Hello Cody Chan, 

• To verify new signatures are downloaded and applied to devices with Sophos Protection for Linux (SPL) on Sophos Central, you can:
  Check the device status in Sophos Central:
• Log in to Sophos Central.
• Navigate to "Devices" and select the specific device you want to check.
• Look for an "update" or "last update" timestamp on the device details page. 
• You can refer to this article for more information on the SPL(Sophos Protection for Linux) version with the latest updates: 
• https://docs.sophos.com/releasenotes/index.html?productGroupID=esg&productID=linux_protection&versionID=Agent
• Please refer to this article if that helps you to check the latest signatures applied on the device via the command line: 
• https://support.sophos.com/support/s/article/KBA-000007858?language=en_US

Regards, 

Hi Rutvik Chavda,

Sorry, I am a newbie for the Sophos. On Sophos Central, I cannot find a virus definitions version that was updated. I only can find the SPL agent installed component version. Any button can update the virus definitions version? Is the "Update Now" button is updated SPL agent component version or an updated new virus definitions version?

Because some Anti-Virus software needs to update the virus definitions every time(e.g. Symantec Endpoint Protection). I don't understand the virus definitions operation for the Sophos protection for Linux.

On your provided KB, it only shows service status and does not mention how to show the virus definitions version.

Best Regards,

Cody