PLEASE READ Advisory: Kernel memory issue affecting multiple OS (aka F**CKWIT, KAISER, KPTI, Meltdown & Spectre) for the latest updates.
This article explains how to install additional remote Sophos Enterprise Consoles (SECs) on your network in order to manage Sophos Endpoints from other computers. One reason to do this is to delegate tasks to other users, it also saves you having to log on to the Sophos management server.
The following sections are covered:
Applies to the following product versions Enterprise Console 5.3.0Enterprise Console 5.4.0Enterprise Console 5.5.0
See the Sophos Enterprise Console advanced startup guide for the version of Enterprise Console you are running. These guides can be found in the Documentation section of the website.
Note: Install the same version of Sophos Enterprise Console as is running on your management server.
If the Sophos Management server is running on a Windows 2008 server or a server with a firewall blocking inbound connections, add a firewall rule to allow DCOM communication from the remote console to the management server. Instructions on how to add an inbound DCOM rule to the Windows 2008 firewall are below.
Note: If you have Sophos Enterprise Console version 5.x installed, Sophos Patch communication should also be allowed. The port you need to exclude depends on what was selected during the installation of the main console.
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article.
This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.