Hello.
Please can some confirm if sophos 9.10.3 for Mac downloaded from sophos enterprise console supports a silent install switch.
Everything I have read suggests it's doesn't is someone able to confirm.
Thanks
Thomas Denton
Hello Thomas,
Thank you for reaching out to the Sophos Community.
In order to perform a silent installation of Sophos AV on MacOS, you will need to use the Terminal. The following KBA advises you to copy the installer file onto the machine you wish to install on, and then to trigger the installation using the CLI.
- https://support.sophos.com/support/s/article/KB-000033340?language=en_US
You will be presented with a UI prompt after the installation completes, this is to allow "Full Disk Access". If you wish to avoid the prompt, you will need to use a PPPC Utility to pre-approve the access requests. Some guidance on doing so can be found within the following recommended reads article.
- https://community.sophos.com/intercept-x-endpoint/f/recommended-reads/116397/sophos-mac-endpoint-how-to-configure-jamf-privacy-preferences-for-10-15-compatibility
Hello Thomas,
Some differences may be present in the installer packages that are being used. Originally when testing this out I used the standalone installer package accessible from id.sophos.com. I will try recreating a more similar lab environment to what you have right now and get back to you in the following days.
Hello All,
I managed to test this a bit further. I was able to get the silent installation to work successfully using a package obtained from the SEC.
The main discrepancy between what I see posted above and what I tried is as follows:
sudo "/private/tmp/sophos/SophosInstaller.app/Contents/MacOS/Installer" --install
sudo "./Sophos Installer.app/Contents/MacOS/tools/InstallationDeployer" --install
I suspect this discrepancy stems from is the following article. Within the article, it states:
Applies to the following Sophos products and versions
Sophos Cloud Managed Endpoint (Mac) - (I'll be inquiring internally to get the article updated as that is a legacy name)
- https://support.sophos.com/support/s/article/KB-000035045?language=en_US
The article I recommend using states that it’s applicable for both Central managed and SEC-managed devices.
- https://support.sophos.com/support/s/article/KB-000033340?language=en_US
Hopefully, this helps clarify things, but if you have any further questions, feel free to reach back out on this thread.
