This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Endpoint Console 4.5 - Not protecting AD machines automatically

hi all,

I have created my groups and synchronized them with my active directory. all the machines appear fine, however Sophos does not get pushed to them automatically. If i right click a machine and protect it, it installs sophos fine with no issues.

Is there anything i need to check to ensure sophos gets pushed to the machines it can see and also any new machines that get added to the monitored OUs?

Thanks a lot,

:11259


This thread was automatically locked due to age.
  • Hello agile1983,

    Is there anything i need to check to ensure sophos gets pushed to the machines

    I assume you have created a Synchronzation point. Did you check Install Sophos security software automatically?

    Christian

    :11261
  • Hi Christian,

    My folders are synchronized with the correct OUs and are now green with a small clock icon on them. I have re-entered the password and checked that sophos is set to install automatically. I have also set the syncronisation schedule to every 5 mins to test this but none of the already discovered machines are having sophos pushed to them.

    Should sophos get pushed to the machines it can see or just new ones added? is it worth me moving a machine out of the synchronised OU and adding it back in? Anything else i need to configure ?

    :11263
  • SEC does not attempt to "re"protect a machine  which has previously been protected (even if it has been deleted from SEC).

    The simplest method to check if automatic protection is working is adding a new machine which was definitely never known to SEC. Another way to trigger automatic protection is deleting a client from the database using sqlcmd. It will then get re-detected and as it is "new" protection should be attempted.

    Christian   

    :11267
  • I have just created a new virtual machine and added it to my domain. I waited for 5 minutes and the machine popped into Sophos correctly, however no antivirus is being pushed to it or even attempting to push to it?

    What else should i need to do apart from synchronising my folders and telling them to install sophos automatically? The sync must be fine as the machine landed in sophos correctly. If i right click and protect the computer it will install fine.

    this is a BRAND NEW install of sophos 4.5.1 - do i need to configure any policies before automatic protection works? are there any logs i can check?

    thanks

    :11275
  • im finding it wont push out to 2008 R2 servers. does sophos have compatibility issues with 2008 r2 at the moment?

    :11291
  • If protect works then sync should also. It is possible to trace the sync but I don't have the information with me right now. Re: Server - IIRC it doesn't automatically protect servers as this could have "unwanted side effects".

    Christian
    :11295