Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 1519 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Endpoint Security- Update during Business Hours

BopBop

We are running Sophos Endpoint Security in our company. We have 1300 computers. 90% computers are in remote locations with high-speed internet connection.

Endpoint Security runs from one central location.  I am noticing that time to time middle of the day Sophos will update the Host server and then push the update to all location.  During business hours when a big update start pushing ( i.e March 23 update) it brings down our network to her knees.

My question is

1)      Can we  configure Sophos so it wouldn’’’’t update client pc during Business hours? ( I haven’’’’t found any option for scheduling)

2)      If the above answer is yes, is this a good practice?

:11401


This thread was automatically locked due to age.
Parents
  • 0

    Hello BopBop,

    to make sure I undersand you correctly: All clients get their updates from the SophosUpdate share on the server? Or do you have several (remote) shares the server is writing to?

    Updating is client-pull, not server-push. The client isn't notified but checks the update location at regular intervals. If an update is available it can't discern whether it is "just" an IDE or a major (software) update. There's no option for a complex schedule and it's not a good idea to turn it off.

    But you can configure the update manager to check for software updates only at certain times. To do this use the Schedule tab in the update manager configuration, Set up and manage schedules under Software updating. 

    HTH

    Christian

    :11419
Reply
  • 0

    Hello BopBop,

    to make sure I undersand you correctly: All clients get their updates from the SophosUpdate share on the server? Or do you have several (remote) shares the server is writing to?

    Updating is client-pull, not server-push. The client isn't notified but checks the update location at regular intervals. If an update is available it can't discern whether it is "just" an IDE or a major (software) update. There's no option for a complex schedule and it's not a good idea to turn it off.

    But you can configure the update manager to check for software updates only at certain times. To do this use the Schedule tab in the update manager configuration, Set up and manage schedules under Software updating. 

    HTH

    Christian

    :11419
Children
No Data
Unfiltered HTML