This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Scripted push of the "Comply with Policy" task

I have several humdered machines on site that state they are "Differs from Policy" this is because of a change to the AV policy since the build of the "Gold Image", I can, from the Sophos Enterprise Console, select all machines with the Differs from Policy issue and Right-Click and "Comply with AV/HIPS Policy", however I would like this to be an automated process once an hour.

i.e. a winodws scheduled task on the sophos sec server that communicates with the Management Server and perfoms the "comply with " RMS message

Can you Help?

:22747


This thread was automatically locked due to age.
Parents
  • Hello SHIGGS,

    you will rather sooner than later have to rebuild the image to incorporate one of the major updates. Your image should resemble the desired configuration as closely as possible.
    There are reasons for not having SEC shoving down policies automatically and unconditionally. Virtual environments are still rather new and need a different solution. I can imagine that the clients request the current policies when starting - but you'd need a way to turn this off before it starts in case you want to collect some evidence for example.

    Christian
    :22785
Reply
  • Hello SHIGGS,

    you will rather sooner than later have to rebuild the image to incorporate one of the major updates. Your image should resemble the desired configuration as closely as possible.
    There are reasons for not having SEC shoving down policies automatically and unconditionally. Virtual environments are still rather new and need a different solution. I can imagine that the clients request the current policies when starting - but you'd need a way to turn this off before it starts in case you want to collect some evidence for example.

    Christian
    :22785
Children
No Data