This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Temporarily disable on access scanning

Okay... I have just enabled endpoint protection and installed the client software on one of the computers on my network, so I can do some testing of this antivirus solution.

Everything installed okay and seems to be working; well kind of...

I have disabled Tamper Protection in the UTM (v9.204) for the workstation (under manage Computers), but everything, with the exception of right-click scanning is still greyed out in the Sophos Security and Control Center on the workstation.

What I want to achieve is the ability to enable/disable on access scanning on the workstation by the user, not disable on access scanning completely via a policy.

Two questions...
1. Why are all of the options greyed out when tamper protection for the workstation is disabled?
2. How do I enable/disable on access scanning on the workstation as a user?

PS. I have changed the tamper protection password to something less cryptic, but I see nowhere that I can use this password on the workstation, if in fact that is required.

So far I am not really loving this virus solution... someone please change my assessment of this AV solution, as it is not a viable solution for me at this time.

This thread was automatically locked due to age.

0 BAlfson over 10 years ago

I guess something happened during the installation. There's a Knowledgebase article about removing it completely from your PC, and you should follow that. As I recall, you have to authenticate in the client before you can make changes, but if that, too, is grayed out, then the re-installation is your best bet.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Owen over 10 years ago

Thanks for the reply Bob, but uninstalling/reinstalling has not changed anything.
The problem, as I see it, is that the logged in user is a "Sophos User", not a "Sophos Administrator".

This begs the question... given that there is an option to authenticate the user, why is this greyed out unless you are an administrator on the box?
I see no way of starting the Sophos Endpoint and Control window as an administrator, so to make any changes I need to logoff and log back in as a workstation administrator, which is a bit rubbish.

As I said, I would like the ability to enable/disable the on access scanning as the logged in user, but this does not seem to be possible as there is no way to authenticate this user and elevate their privileges to Sophos administrator.

Why have an authenticate user option if you cannot use it?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 10 years ago

If you aren't an administrator on the PC, then it makes sense that you can't change the security settings on the PC. I'm not an MCSP, so I'm not sure, but I think this can be accomplished in Active Directory by making all of the users Sophos Administrators. Since you're in "pre-sales" mode on this, I would contact your reseller and have them get Sophos involved.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Owen over 10 years ago

Thanks for that explanation Bob, it is all that I needed to get me on the right path.
I was not aware that the Sophos install created local user groups on the workstation (probably should have looked, doh!!). After learing this the path was quite straight forward.
* In AD, create a global security group called "Sophos Admins" and add the users requiring Sophos administrative rights to that group.
* On the workstation, add the Sophos Admins domain group to the local SophosAdministrators group.

Problem solved! Thanks. [:)]
Cancel
Vote Up 0 Vote Down

Cancel