"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
This article applies to computers on which you are installing Endpoint Security and Control (including Sophos Anti-Virus and Sophos Client Firewall, etc.) for the first time.
Applies to the following Sophos product(s) and version(s) Sophos Endpoint Security and Control 10.6.3
On operating systems where you must manually install Endpoint Security and Control or Sophos Anti-Virus, you can either:
You can protect computers by running the installation program manually from the distribution folder (share) where Sophos Update Manager (SUM) downloads updates to.
On the Linux endpoint mount the windows drive and run the install.sh.
Switch to the root user: su – Create a new directory to act as a mount point: mkdir /mnt/sophosupdate/ Set ownership and permissions to make the directory executable. For example: chown root:root /mnt/sophosupdate/ chmod 700 /mnt/sophosupdate/ Mount the SophosUpdate share or CID. For example: mount -t cifs //SERVER/SophosUpdate /mnt/sophosupdate/ -o username=administrator,password=password Run the install.sh from the mounted CID. For example: /mnt/sophosupdate/CIDs/S000/savlinux/install.sh Follow the instructions to accept the license agreement and complete the installation.
Several knowledgebase articles describe some specialized installation scenarios in more detail. For more information on deployment scenarios (including scripts, SMS or SCCM) see article 114191.
Where computers are not always on the network, e.g., laptops that are sometimes used away from the office, you can configure them to update from an alternative source when they are away.
The alternative source can be an updates folder on a website maintained by your company, or it can be a Sophos website. You will either need to create a new updating policy or edit an existing one and enter the alternate update source in the secondary server tab. For instructions on how to do this refer to the associated Help manual for your console version (e.g., 6.3 Configuring the updating policy for Enterprise Console 5.0).
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.