What can i do for systems not on the networks and also without internet?

Question

We have SEC installed in our clients premises but they have a few systems without network or internet access. How can we keep the Sophos AV updates ? Will the standalone installer work in this scenario?

This thread was automatically locked due to age.

jak · Accepted Answer

I would suggest that you could take a copy of the distribution point from the server and copy it to the client, I guess using a USB stick.

You can then install (run setup.exe) from this local "share" without installing RMS (setup -mng no) https://community.sophos.com/kb/en-us/12570.

You can then update the computer by regularly copying the distribution point to the client that AutoUpdate is checking.

If you do need to setup policy, you could create a specific CID on the server and use exportconfig and configcid to configure it with XML files.
https://community.sophos.com/kb/en-us/13111

Regards,
Jak

jak · Answer

Well if you have a SEC server here for example \secserver\Sophos\CIDs\S000\savscfxp\ 
 Then you would copy over S000 to the endpoint so you might have: C:\Sophos\CIDs\S000\savscfxp\ You could then run: setup.exe -mng no -scf -crt R -updp C:\Sophos\CIDs\S000\savscfxp -s -ni 
 Do you even need a username and password to update from the local computer? I think a local path is fine for updating rather than having to share out say Sophos on the local computer to make: \127.0.0.1\sophos\CIDs\S000\savscfxp\ Then when you want to update the client, you would check it's not in a mid update, (is alupdate.exe running) and copy over: \secserver\Sophos\CIDs\S000\savscfxp\ to C:\Sophos\CIDs\S000\savscfxp\ On the next update check SAU should see the new files and update or you could force it if needed. You night have to test this, I assume it all works. Regards.

jak · Answer

The endpoint doesn't have a warehouse in this scenario. SUM downloads a warehouse, from the warehouse the files are decoded into the CIDs/Distribution points. You are copying over the CIDs/Distribution to the client, not the warehouse. AutoUpdate will pull the files down from the local computer and fill a local cache which it will install the products from. If you were putting a SUM on an air-gapped/isolated computer, you would move the Warehouse as SUM needs a warehouse. Detailed here: https://community.sophos.com/kb/en-us/64899