Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 4 replies
  • Subscribers 16 subscribers
  • Views 13067 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Enterprise Console Migration Options

gary smith

Hi

Were looking at migrating a couple of our on-prem servers from 2008 to 2012/16 and two of these servers currently has Enterprise Console installed. Server 1 supports Site A, Server 2 supports Site B & C.

Seems to be lots of info/guides, but all over the place.

So let me get this right before i go any further:

  1. We can use the cloud migration tool to migrate from SEC to cloud?
  2. Can/should we run this on the two servers or just the one?
  3. Is it as granular as SEC?
  4. Are all the existing policies the same i.e. Updates, AV, Fwall, App control, Data, device, tamper, patch, web?

Thanks

 



This thread was automatically locked due to age.
Parents
  • 0

    Hello gary smith,

    no Cloud/Central here and @jak is able and will likely give you more answers and details.

    Central is not the same as SEC and neither is a subset of the other. Central is server-aware and has more features when it comes to them, otherwise the management is user-centric. Endpoint versions are more or less in sync. I venture that both have their pros and cons regarding granularity of management. Guess Central will better integrate with other cloud products. According to Sophos Cloud Migration - Unsupported features Firewall is not (yet) available, same for Data Control and Patch.

    As the SEC/SUM server downloads the required software for the endpoints it manages you have to do it on all management servers (or replace the Endpoint software using some other procedure). There's quite a number of articles (all over the place) if you search the knowledgebase for cloud migration.

    And if your current installation are rather large you should contact a partner/reseller so that you have a real person you can if necessary put the blame on and give a whipping. [;)]

    Christian

  • 0 in reply to QC

    wow, no firewall or application control either buy the looks of it.  

    oh well SEC it is then.

  • +1 in reply to gary smith

    Central has application control.  It does not have a firewall.  Is that important to you?

    If I had to choose going forward I would opt for Central.  The features are coming thick and fast and I fell that is the main focus.  Certianly for a next-gen endpoint.

    This is the what's new link for Central:
    https://downloads.sophos.com/readmes/cloud/scloud_readme_eng.html

    That said, it really depends on what features are important to you.  If you want full control over the version supplied to the clients, so you can stage rollouts then on-premise is the way to go at the current time.  If you want to manage all your users and their devices, such as mobiles and computers, via a single console.  Central is the option.

    I do like the server specific management in Central with update caches, groups for policy assignment.  The reporting is a little light in Central but a reporting APIs has just been opened up so there is scope there.

    Regards,

    Jak

Reply
  • +1 in reply to gary smith

    Central has application control.  It does not have a firewall.  Is that important to you?

    If I had to choose going forward I would opt for Central.  The features are coming thick and fast and I fell that is the main focus.  Certianly for a next-gen endpoint.

    This is the what's new link for Central:
    https://downloads.sophos.com/readmes/cloud/scloud_readme_eng.html

    That said, it really depends on what features are important to you.  If you want full control over the version supplied to the clients, so you can stage rollouts then on-premise is the way to go at the current time.  If you want to manage all your users and their devices, such as mobiles and computers, via a single console.  Central is the option.

    I do like the server specific management in Central with update caches, groups for policy assignment.  The reporting is a little light in Central but a reporting APIs has just been opened up so there is scope there.

    Regards,

    Jak

Children
Unfiltered HTML