What can i do for systems not on the networks and also without internet?

I would suggest that you could take a copy of the distribution point from the server and copy it to the client, I guess using a USB stick.

You can then install (run setup.exe) from this local "share" without installing RMS (setup -mng no) https://community.sophos.com/kb/en-us/12570.

You can then update the computer by regularly copying the distribution point to the client that AutoUpdate is checking. 

If you do need to setup policy, you could create a specific CID on the server and use exportconfig and configcid to configure it with XML files.
https://community.sophos.com/kb/en-us/13111

Regards,
Jak

Hi Jak,

What is to be entered in the share path and username\password? 

setup.exe -mng no -scf -crt R -updp \\myServer\Sophos\CIDs\S000\savscfxp\ -ouser SIhvF6vRtcGyG0mpJWdvIAc=  
 -opwd EIhvI6vRtcEyG0mpKWdvIAc= -s -ni

Well if you have a SEC server here for example

\\secserver\Sophos\CIDs\S000\savscfxp\

Then you would copy over S000 to the endpoint so you might have:

C:\Sophos\CIDs\S000\savscfxp\

You could then run:
setup.exe -mng no -scf -crt R -updp C:\Sophos\CIDs\S000\savscfxp -s -ni

Do you even need a username and password to update from the local computer?

I think a local path is fine for updating rather than having to share out say Sophos on the local computer to make:
\\127.0.0.1\sophos\CIDs\S000\savscfxp\

Then when you want to update the client, you would check it's not in a mid update, (is alupdate.exe running) and copy over:
\\secserver\Sophos\CIDs\S000\savscfxp\
to 
C:\Sophos\CIDs\S000\savscfxp\

On the next update check SAU should see the new files and update or you could force it if needed.

You night have to test this, I assume it all works.

Regards.

Hi Jak,

I have tested this at one clients place but since we have not copied the warehouse folder still it is showing as updated, i cant understand how.

Where should i copy and paste the warehouse folder ?

You're not copying the warehouse but the CID/distribution point.

Anywhere on the computer is fine really. C:\Sophos\ was just an example.

You're not copying the warehouse but the CID/distribution point.

Anywhere on the computer is fine really. C:\Sophos\ was just an example.

Hi Jak,

Sorry if i am not following it properly, i am listing out what am currently doing.

- Have a PC with no network connection ( no LAN or WAN)

-I copy the folder "\\secserver\Sophos\CIDs\S000\savscfxp\" from the server    to    "C:\Sophos\CIDs\S000\savscfxp\" on the PC.

- Run the command "setup.exe -mng no -scf -crt R -updp C:\Sophos\CIDs\S000\savscfxp -s -ni" and Sophos gets installed on the PC.

My question is that there should be a warehouse folder in the PC at the location C:\programdata\sophos\autoupdate\data\ folder which is missing.

Should i copy the warehouse folder from the "\\secserver\warehouse" to the above location ?

Thanks for giving time to my query.

The endpoint doesn't have a warehouse in this scenario.  SUM downloads a warehouse, from the warehouse the files are decoded into the CIDs/Distribution points.

You are copying over the CIDs/Distribution to the client, not the warehouse.  AutoUpdate will pull the files down from the local computer and fill a local cache which it will install the products from.

If you were putting a SUM on an air-gapped/isolated computer, you would move the Warehouse as SUM needs a warehouse. Detailed here: https://community.sophos.com/kb/en-us/64899 

Great. I just tested this with EICAR and it is blocking it. 

Thanks for your help !