Sophos Small Business Solutions 2.0 upgrade guide

Upgrade guide

SMALL BUSINESS SOLUTIONS 2.0

Describes upgrading to the new versions of:Sophos Control CenterSophos Anti-VirusSophos Client Firewall

Document date: September 2006

�

About this guideThis Sophos Small Business Solutions 2.0 upgrade guidedescribestheprocedureforupgradingfromSophosControlCenterversion1toSophosControlCenterversion�.Inparticular,it

TellsyouaboutnewfeaturesinSophosSmallBusinessSolutions.

OutlinestheprocedureforupgradingtoSophosControlCenterversion�.

Guidesyouthroughtheupgradestepbystep.

Detailspost-upgradetasks.

YoucanfinddetailsofallotherconfigurationoptionsofSophosControlCenter,thatarenotcoveredinthisguide,inSophosControlCenterHelp.

Sophosdocumentationispublishedatwww.sophos.com/support/docsandontheSophosInstallCD.

http://www.sophos.com/support/docs/

�

ContentsAboutthisguide............................................................................................�

1SophosSmallBusinessSolutionsoverview..............................................4

�What’snewinSophosSmallBusinessSolutions?...................................6

�Systemrequirements..................................................................................9

4Preparingtoupgrade...............................................................................1�

5UpgradingSophosControlCenter.........................................................15

6Upgradingcomputersonthenetwork...................................................17

7Upgradingcomputersmanually.............................................................�0

8Upgradingcomputersnotonthenetwork.............................................��

9Firewallconfiguration.............................................................................�4

10Checkingcomputersareprotected.......................................................�6

11Settingupscanningforpotentiallyunwantedapplications................�8

Glossary.......................................................................................................�1

Appendix1.UpgradinganadditionalSophosControlCenterconsole..��

Appendix�.Proxydetails...........................................................................�5

Appendix�.Changingthedownloadfolder.............................................�6

Appendix4.Protectingcomputerswiththefirewall.................................�7

Technicalsupport........................................................................................�8

Sophos Small Business Solutions 2.0 upgrade guide

4

1 Sophos Small Business Solutions overviewTheneweditionofSophosSmallBusinessSolutionscomprisesthreeproducts:SophosSecuritySuite,SophosComputerSecurity,andSophosAnti-Virus.Thetablebelowshowswhichsoftwareisincludedineachproduct.

Product

Software

Sophos Security Suite

Sophos Computer Security

Sophos Anti-Virus

SophosControlCenter

SophosAnti-Virus

SophosClientFirewall

SophosPureMessage

Sophos Control Centerenablesyoutocentrallydeploy,update,andmonitoranti-virusandfirewallsoftwareonyourcomputers,thusprotectingthemagainstviruses,worms,Trojans,spyware,hackers,andpotentiallyunwantedapplications(PUAs).

Sophos Anti-Virus (forWindows98/Me/�000andlater,andMacOSX)detectsandeliminatesviruses,worms,Trojans,andspywareonyourcomputerornetwork.SophosAnti-Virus6forWindows�000andlateralsodetectsandremovespotentiallyunwantedapplicationssuchasadware,dialers,remoteadministrationtools,andhackingtools.

Sophos Client Firewall (forWindows�000andlater)canlimitaccesstothecompanynetworkortheinternettospecificallypermittedapplicationsorclassesofapplications.Itproactivelylocksdowncomputers,protectingnetworksagainstinternetworms,hackersandtheriskofvirusinfectionfromunprotectedcomputers,especiallythosethatconnectdirectlytotheinternet.


5

Sophos PureMessage (forWindows/Exchange)providesintegratedgatewayandmessagingprotectionfromviruses,spyware,andspam.Itscansallinbound,outbound,andinternalemailmessagesandExchangemessagestoresandincludesthreatreductiontechnologytoprotectagainstneworunknownemail-bornethreats.

TolearnmoreaboutSophossecuritysoftware,refertotherespectiveHelporusermanual.

Tolearnmoreaboutthreats,gotowww.sophos.com/security.

http://www.sophos.com/security


6

2 What’s new in Sophos Small Business Solutions?

Sophos Control Center 2.0

Support of the latest versions of anti-virus and firewall software

ThenewversionofSophosControlCenterincludestheabilitytoinstall,configure,andmonitorSophosAnti-Virus6andSophosClientFirewallforWindows�000andlater.UsingSophosControlCenter,youcanalsoconfigureandmonitorthelatestversionsofSophosAnti-VirusforWindows98/MeandMacOSX(versions4.6and4.8respectively).

YouwillhavetoinstallorupgradeSophosAnti-VirusonWindows98/MeandMacOSXcomputersmanuallyasdescribedlaterinthisguide.


7

Central scanning of computers

SophosControlCenterallowsyoutosetupscheduledscanningofthecomputersonyournetwork.

ScheduledscanningoncomputersisavailableonallWindowsplatforms;itisnotavailableinSophosAnti-VirusforMacOSX.

Centralized detection and cleanup of potentially unwanted applications

SophosControlCenterdisplaysdetectedpotentiallyunwantedapplicationsandprovidesalinktotheSophoswebsitewhereyoucanobtainmoredetaileddescriptionsofthreats.FromSophosControlCenter,youcanalsoauthorizedetectedapplicationsorremovethemfromthecomputers.

Centralized cleanup of networked computers

WithSophosControlCenter,youcancentrallycleanupcomputersthatareinfectedwithavirusorhaveunwantedapplicationsonthem.

Reporting and notifications

SophosControlCenternowallowsyoutogeneratesummaryreports,includinganynotificationsoferrors,andemailthemtoothers.

Managing via Terminal Services or Citrix

ItispossibletomanageSophosControlCenterviaTerminalServicesand/orCitrix.

Launching PureMessage

IfPureMessageconsoleisinstalledonthesamecomputerasSophosControlCenter,youcanlaunchPureMessageconsolefromSophosControlCenter.


8

Sophos Anti-Virus 6 for Windows 2000 and laterDetectionandcleanupofpotentiallyunwantedapplications

SophosAnti-Virus6canscanforpotentiallyunwantedapplications,preventthemfromrunningonandcleanthemfromyourcomputerornetwork.PotentiallyunwantedapplicationsdetectedbySophosincludeawiderangeofprogramsthatperformactionssuchasdisplayingadvertising,trackingwebsitesvisited,orchangingtheconfigurationofacomputer.

Sophos Client Firewall for Windows 2000 and laterSophosClientFirewallcanlimitaccesstothecompanynetworkortheinternettospecificallypermittedapplicationsorclassesofapplications.Itproactivelylocksdowncomputers,protectingnetworksagainstinternetworms,hackersandtheriskofvirusinfectionfromunprotectedcomputers,especiallythosethatconnectdirectlytotheinternet.

Sophos PureMessage 2.6Extendedreportingfunctionality

PureMessage�.6providesreportsforSMTP,NNTP,andExchangeInformationStorescanning(earlierversionsofPureMessageprovidedonlySMTPreports).PureMessageprovidesthefollowingreports:messagecategorization,quarantinedatabasesize,quarantinefoldersize,topvirusandspamrecipients,topviruses,andspamscorerangevolumes.

Forafulllistoffeaturesineachapplication,refertotherespectiveHelporusermanual.


9

3 System requirements

Sophos Control Center and server componentsOperatingsystemrequirements:

Windows�000withServicePack�(SP�)orlater

WindowsXPProfessional(SP1orlater)

WindowsServer�00�

WindowsSmallBusinessServer�00�

Sophosrecommendsthataserveroperatingsystemisused,thatis,Windows�000Server(SP�orlater),WindowsServer�00�,orWindowsSmallBusinessServer�00�.

SophosControlCenterisnotsupportedon64-bitversionsofWindows.

Diskspaceandmemory:

1GBoffreeharddiskspace,�56MBofRAM

Sophos Anti-VirusOperatingsystemrequirements:

Windows98SEorMewithInternetExplorer5.5orlater

Windows�000ProfessionalorServer(SP�orlater)

WindowsXPHomeorProfessional(SP1orlater)

WindowsServer�00�

WindowsSmallBusinessServer�00�

64-bitversionsofWindows

MacOSX10.�orlater


10

Diskspaceandmemory:

Windows98SEorMe:90MBoffreeharddiskspace.Minimum48MBofRAM,recommended64MB

Windows�000ProfessionalorServer,XPHomeorProfessional,Server�00�,and64-bitversionsoftheseplatforms:1�0MBoffreediskspace.Minimum1�8MBofRAM,recommended�56MB

MacOSX:70MBoffreeharddiskspace.1�8MBofRAM

Sophos Client FirewallIfyouwanttoprotectWindows�000orlatercomputerswithSophosClientFirewall,youshoulduninstallanyotherfirewallsoftwarefirst(withtheexceptionofWindowsFirewall,whichwillbedisabledautomaticallywhenSophosClientFirewallisinstalled).

SophosClientFirewallisavailableonlyforWindows�000andlaterworkstationoperatingsystems,thatis,Windows�000ProfessionalandWindowsXP,including��-bitWindowsXPon64-bitcomputers.

SophosClientFirewallisdesignedtorunonworkstationsconnectedtoanEthernet-basedLAN(localareanetwork)ortheinternet.

YoushouldnotinstallSophosClientFirewallonthecomputerwhereSophosControlCenterisinstalled.

SophosClientFirewallrequires:

Minimum100MBoffreeharddiskspace

Minimum��0MBofRAM

SophosAnti-Virusversion6orlater

SophosClientFirewallisnotsupportedon:

Serveroperatingsystems(forexample,Windows�000ServerorWindowsServer�00�)

64-bitversionsofWindows

SophosClientFirewalldoesnotsupportIPv6.ItletsIPv6packetsthrough.


11

PureMessage 2.6

SMTP-only version

Operatingsystemrequirements:

Windows�000ServerorProfessionalwithSP�orlaterandwithMicrosoftInternetInformationServer(IIS)

WindowsServer�00�withIIS

WindowsXPProfessionalwithSP1orlaterandwithIIS

Diskspaceandmemory:

140MBoffreeharddiskspace,�56MBofRAM

Microsoft Exchange version

Operatingsystemrequirements:

Windows�000ServerwithSP�orlater;WindowsServer�00�

Exchange�000ServerwithSP�;ExchangeServer�00�

Diskspaceandmemory:

140MBoffreeharddiskspace,�56MBofRAM


1�

4 Preparing to upgradeBeforeyouupgradeSophosControlCenter,andsubsequentlyupgradethesoftwareonyournetworkedcomputersmanagedbyit,makesurethatyoumeetthefollowingprerequisites:

YouhavemetallthehardwareandsoftwarerequirementslistedinChapter�.

YouareanadministratoronthecomputerwhereyouareupgradingSophosControlCenter.

SimpleFileSharingisdisabledonallWindowsXPcomputers.Formoreinformation,refertowww.sophos.com/support/knowledgebase/article/�8�7.html.

Youhaveremovedanyothervendor’sfirewallsoftware,exceptWindowsFirewall,fromallWindows�000/XPcomputersonwhichyouwanttoinstallSophosClientFirewall.

IfyouhaveWindowsXPSP�workstationsonwhichyoudon’twanttoinstallSophosClientFirewall,orWindowsServer�00�SP1computers,andthesecomputershaveWindowsFirewallturnedon,youmustdothefollowing:

EnableFileandPrinterSharingforMicrosoftNetworks.Tofindouthowtodothis,refertowww.sophos.com/support/knowledgebase/article/17�8.html.

MakesureTCPports819�,819�and8194areopen.

Addthefollowingprogramexception:

C:\ProgramFiles\Sophos\RemoteManagementSystem\RouterNT.exe

Tofindouthowtodothis,refertowww.sophos.com/support/knowledgebase/article/1075.html.

Restartthecomputersforthechangestotakeeffect.

ItisrecommendedthatyoubackupyourexistingversionofSophosControlCenterpriortoupgradingit.

http://www.sophos.com/support/knowledgebase/article/2837.html




1�

AftercompletingtheSophosControlCenterInstallationWizard,youwillneedtoeitherlogofffromthecomputerwhereyouupgradedSophosControlCenterandthenlogonagain,orrestartthecomputer.

YoumustrestarteachcomputerwhereyouhaveinstalledSophosClientFirewall,toactivatethefirewall.

Before you upgrade Sophos PureMessageIfyouuseSophosPureMessageandwanttoupgradeittoversion�.6,followthisprocedure:

UpgradeSophosControlCentertoversion�,asdescribedinChapter5.

UpgradeSophosAnti-Virusonyournetworkedcomputers.Forinstructions,seeChapter6.

MakesurethatSophosAnti-VirusontheserverwherePureMessageisinstalledhasbeenupgradedtoversion6.

TocheckwhichSophosAnti-Virusversionisinstalled,opentheSophosAnti-VirususerinterfaceandfromtheHelpmenuselectAbout.Theversionnumberisonthefirstline.

UpgradeSophosPureMessagetoversion�.6.Forinstructions,seetheSophos PureMessage Upgrade Guide.

Itisimportantthatyoufollowthisupgradeorder,tokeepyourversionofPureMessageuptodate.InthenewversionofSophosSmallBusinessSolutions,spamrulesarenolongerdownloadedviaSophosControlCenterbutdirectlyfromSophos.InSophosControlCenter,analternativesourceforupdatesissettoFrom Sophos (intheConfigure updatingdialogbox,Alternative sourcetab),thusensuringthatyoureceivethelatestspamrulesassoonastheyarereleased.

TheFrom Sophosoptionalsohelpsyoukeepcomputersthatarenotalwaysconnectedtoyourcompanynetwork(forexample,laptops)uptodatewiththelatestsecuritysoftwareandupdates.

Thechecklistonthenextpagedescribestheupgradetasks.

1.

�.

�.

4.


14

Sophos Control Center upgrade checklist

No. Task Instructions Relevant for * Com-pleted

1 Createavalid,completebackup

Yoursystemdocumentation

SAV,SCS,SSS

� UpgradeSophosControlCenter

Chapter5 SAV,SCS,SSS

� Ifrelevant,upgradeanadditionalSophosControlCenterconsole

Appendix1 SAV,SCS,SSS

4 Upgradecomputersonthenetwork


5 Ifrequired,manuallyupgradecomputersthatwerenotupgradedinStep4


6 UpgradeSophosPureMessage

Sophos PureMessage Upgrade Guide

SSS

7 Upgradecomputersnotonthenetwork


8 Configurethefirewall(optional)

Chapter9 SCS,SSS

9 Checkthatnetworkedcomputersareprotected


10 Setupscanningforpotentiallyunwantedapplications(PUAs)


*SophosSmallBusinessSolutionsproducts:SAV-SophosAnti-Virus,SCS-Sophos

ComputerSecurity,SSS-SophosSecuritySuite


15

5 Upgrading Sophos Control CenterToupgradeSophosControlCenter,dothefollowing:

Logonasanadministratorordomainadministrator,asappropriate,atthecomputerwhereSophosControlCenterversion1isinstalled.

CloseallopenSophosapplications,ifany.

InserttheSophosInstallCD.TheCDshouldauto-run.IftheCDdoesnotauto-run,browsetotheCDanddouble-clickLaunchcd.exe.OntheUpgradingpageoftheSophosCDViewer,clicktheUpgradebutton.

Alternatively,downloadtheSophosControlCenterInstallerfromtheSophoswebsiteasfollows:

Gotowww.sophos.com/support/updatesandentertheusernameandpasswordsuppliedtoyoubySophos.FollowthelinkstodownloadtheinstallerforyourSophosSmallBusinessSolutionsproduct,andthenruntheinstaller.

OntheWelcomepageoftheSophosControlCenterInstallationWizard,clickNext.

OntheLicense Agreementpageofthewizard,readthelicenseagreement.Ifyouagreetothetermsoftheagreement,clickI accept the terms in the license agreement.ClickNext.

OntheDestination Folderpage,youseethefolderwhereSophosControlCenterwillbeinstalled.

Bydefault,thenewversionofSophosControlCenterisinstalledinthefolderC:\ProgramFiles\Sophos\SCC,withyoursettingsretained.ThentheinstallerdeletestheoldinstallationfolderC:\ProgramFiles\Sophos\ControlCenter.

Ifyouwanttochangethedestinationfolder,clicktheChangebuttonandbrowsetothenewfolder.ClickNext.

OntheSetup Typepage,leaveCompleteselectedandclickNext.

OntheReady to Install the Programpage,clickInstall.

1.

�.

�.

4.

5.

6.

7.

8.

http://www.sophos.com/support/updates


16

Whenupgradeiscomplete,youarepromptedtologofforrestart.ClickYesorFinish.

TheinstallerhasnowupgradedSophosControlCenter,retainingyoursettings.

Ifyouhavearemotemanagementconsoleandwanttoupgradeit,gotoAppendix1.

Forinstructionsonhowtoupgradeyournetworkedcomputers,proceedtoChapter6.

9.


17

6 Upgrading computers on the networkWhenyoulogontothecomputeraftertheupgrade,SophosControlCenterstartsandtheSophos network protection wizardappears.Thewizardguidesyouthroughtheprocessofprotectingcomputersonyournetworkwiththelatestsecuritysoftware.Completethewizardasfollows:

OntheWelcomepageofthewizard,clickNext.

OntheInitializing installationpage,waitwhileSophosControlCenterperformsinitialsetuptasks.Aftertheinitialsetupiscomplete,theNextbuttonbecomesavailable.ClickNext.

OntheSelect softwarepage,selectthesoftwarefortheoperatingsystemsrunningonyourcomputers.

TheoptionsWindows 2000 and laterandWindows 98 and Me areselectedbydefault.SophosControlCenteralwaysprovidesprotectionforWindows�000andlater.Youcannotalterthissetting.IfyoudonothaveWindows98orMecomputers,cleartheWindows 98 and Mecheckbox.

IfyouhaveMacOSXcomputers,selecttheMac OS Xcheckbox.Thiswillenableyoutoinstallanti-virussoftwareonthecomputerslater.

OntheSophos download account detailspage,theusernameandpassword,previouslysuppliedtoyoubySophos,aredisplayed.ClickNext.

Ifyouuseaproxyservertoaccesstheinternet,seeAppendix�.

Bydefault,Sophossoftwareandupdatesaredownloadedtothefolder\\Servername\Sophos,whereServernameisthenameofthecomputerthatisrunningSophosControlCenter.Ifyouwanttochangethelocationwheresoftwareandupdatesaredownloadedbeforetheyareinstalled(forexample,ifyoudonothaveenoughfreediskspaceinthedefaultlocation),seeAppendix�.

1.

�.

�.

4.


18

OntheWindows user account detailspage,enterthedetailsoftheadministratoraccountvalidonallcomputersonthenetwork,toenableSophosControlCentertoinstallsoftwareonthesecomputers.

OntheProtect computerspage,waitforthecomputerstobelocated.

OnlyWindows�000andlatercomputerswillbelistedonthispage,sinceautomaticinstallationorupgradeisnotpossibleonWindows98/MeorMacOSXcomputers.

IfyouhadhiddencomputersinthepreviousversionofSophosControlCenter,theywillnowappearinthelistofcomputers.

Selectthetypeofprotectionyouwanttoinstallonthecomputers.Anti-virussoftwareisselectedforinstallationonallthecomputersbydefault.Ifyoudonotwanttoinstallanti-virussoftwareonacomputer,cleartheAnti-viruscheckboxnexttothatcomputer.ToselectorclearalltheAnti-viruscheckboxesinthelist,select orclear the check box in the Anti-virus column heading.

SophosClientFirewallcanbeinstalledonlyonworkstationsrunningWindows�000orlater.YoucannotinstallitonserversorthecomputerthatisrunningSophosControlCenter.ThefirewallrequiresSophosAnti-Virus.


Youcanchoosetoinstallthefirewalllater.Forinstructions,seeAppendix4.

Ifyouwanttoinstallthefirewallnow,selecttheFirewallcheckboxesnexttothecomputerswhereyouwanttoinstallit.

ClickNext.

OntheDownload progresspage,aprogressbarisdisplayed.Afterthewizardfinishesdownloadingthesoftwareandpreparingitforinstallation,theNextbuttonbecomesavailable.ClickNext.

5.

6.

7.


19

IftherearecomputerslistedontheComputers you must protect manuallypage,clickPrinttoprintalistoftheunprotectedcomputers.Alternatively,clickSave astosaveacopyofthelist,ormakeanoteofthecomputers.ClickNext.

Onthelastpageofthewizard,clickFinish.

Afteryouclosethewizard,SophosControlCenterwillinstallthesoftwareautomaticallyonasmanyoftheselectedcomputersaspossible.Youwillseethecomputers,withinformationabouttheirstatus,listedinSophosControlCenter.

GotoeachcomputeronthelistofunprotectedcomputersandinstallSophosAnti-Virusand(ifyourlicenseincludesit)SophosClientFirewallasdescribedinChapter7.

8.

9.

10.


�0

7 Upgrading computers manuallyIfsomeofyournetworkedcomputerswerenotupgradedautomatically,gotoeachcomputer,logonasanadministrator,andupgradethesecuritysoftwareasfollows.

YouwillneedtorestarteachWindowscomputeronwhichyouhavemanuallyupgradedthesoftware.

Windows 2000 or later computersIf your license includes Sophos Client Firewall,browsetotheupdatesfolder(bydefault,\\Servername\Sophos\SAVSCFXP,whereServernameisthenameofthecomputerthatisrunningSophosControlCenter)andrunsetup.exe.ToinstallSophosClientFirewallaswellasSophosAnti-Virus,intheSetupdialogbox,selecttheInstall Sophos Client FirewallcheckboxandclickOK.

ThefirewallcanbeinstalledonlyonworkstationsrunningWindows�000orlater;itcannotbeinstalledoncomputersrunningserveroperatingsystems.YoushouldnotinstallthefirewallonthecomputerthatisrunningSophosControlCenter.SophosClientFirewallrequiresSophosAnti-Virus.

If your license does not include Sophos Client Firewall,browsetotheupdatesfolder(bydefault,\\Servername\Sophos\SAVSCFXP,whereServernameisthenameofthecomputerthatisrunningSophosControlCenter)andrunsetup.exe.

Windows 98/Me computersBrowsetotheupdatesfolder(bydefault,\\Servername\Sophos\ES9x,whereServernameisthenameofthecomputerthatisrunningSophosControlCenter)andrunsetup.exe.


�1

Mac OS X computersCopytheinstallationpackageSophosAnti-Virus.mkpgfrom\\Servername\Sophos\ESOSXtothecomputerwhereyouwanttoinstallSophosAnti-Virus.Thendouble-clickSophosAnti-Virus.mkpg.

Aftertheupgradeiscomplete,youwillbeabletomanagethecomputersfromSophosControlCenter.

Forinstructionsonhowtoupgradesinglecomputers(thatis,computersthatarenotconnectedtoyourcompanynetwork),proceedtoChapter8.


��

8 Upgrading computers not on the networkToupgradesecuritysoftwareonsinglecomputersthatarenotconnectedtoyourcompanynetwork,doasfollows.

Haveyourdownloadusernameandpasswordtohand.ThesewillbeinanemailsenttoyoubySophos.

Makesurethatyouareloggedontothecomputerasanadministrator.

YoucaneitherupgradeSophosAnti-VirusfromtheSophosInstallCDordownloadtheinstallerfromtheSophoswebsite.

To upgrade from the Sophos Install CD,inserttheCD.TheCDshouldauto-run.IftheCDdoesnotauto-run,browsetotheCDanddouble-clickLaunchcd.exe.

OntheUpgradingpageoftheSophosCDViewer,followthelinkUpgrade Sophos Anti-Virus on a single computerandclickInstall.

To upgrade from the Sophos website,gotowww.sophos.com/support/updatesandentertheusernameandpasswordsuppliedtoyoubySophos.FollowthelinkstodownloadthestandaloneinstallerforSophosAnti-Virusforyouroperatingsystem,andthenruntheinstaller.

CompletetheSophosAnti-Virusinstallationwizard.

ForWindows�000andlater,ifyouwanttosetupscanningforpotentiallyunwantedapplications,Sophosrecommendsthatyoubeginbyusingascheduled(on-demand)scantodetectpotentiallyunwantedapplications.Thisletsyoudealsafelywithapplicationsthatarealreadyrunningonacomputer.Youcanthenenableon-accessdetectiontoprotectthecomputerinfuture.Forinstructionsonhowtosetupanon-demandscananddealwithpotentiallyunwantedapplications,seeSophosAnti-VirusHelp.

1.

�.

�.

4.



��

AfteryouhaveinstalledSophosAnti-Virusonthecomputer,andifyourlicenseincludesSophosClientFirewall,installthefirewall.YoucaneitherinstallthefirewallfromtheSophosInstallCDordownloadtheinstallerfromtheSophoswebsite.

To install from the Sophos Install CD,intheSophosCDViewer,ontheInstallationpage,followthelinkInstall Sophos Client Firewall on a single computerandclickInstall.

To install from the Sophos website,gotowww.sophos.com/support/updatesandentertheusernameandpasswordsuppliedtoyoubySophos.FollowthelinkstodownloadthestandaloneinstallerforSophosClientFirewall,andthenruntheinstaller.

CompletetheSophosClientFirewallinstallationwizardandrestartthecomputer,toactivatethefirewall.

Togetstartedwiththefirewall,followinstructionsintheSophos Client Firewall Standalone Startup Guide.

5.

6.

7.



�4

9 Firewall configurationWhenyoufirstinstallthefirewall,itisenabledandusesasetofdefault(orfactory)settings.

What are the factory settings?Bydefault,thefirewall:

Appliesruleswithoutaskingtheuserateachcomputerforconfirmation,thatis,worksinnon-interactivemode(thusallowingyourcomputeruserstoworkuninterrupted).

Allowsalloutboundtraffic(noapplicationchecksumsarecalculated).

Blocksallunauthorizedinboundtraffic.

Allowsfileandprintsharing.

Allowsbasicnetworkingfunctions.

Ifyouwanttohavegreatercontrolovertheconfigurationofthefirewall,youcanconfigureitbycreatingcustomrules.

Configuring the firewall by creating custom rulesOntheConfigurationmenu,clickConfigure firewall.TheConfigure firewall wizardstarts.

OntheEnable firewallpageofthewizard,makesurethattheTurn on the firewallcheckboxisselected.ClickNext.

OntheProtection typepage,selectCustom settings.

OntheFile and print sharingpage,selectAllow file and print sharingifyouwanttoallowothercomputersonthelocalareanetworktoaccessprintersandsharedfoldersonyourcomputer.

1.

�.

�.

4.


�5

OntheRules for network trafficpage,selectoneofthefollowingoptions:

Block inbound and allow outbound traffic

Block inbound and outbound traffic

Ifyouselectthisoption,thefirewallwillblockalloutboundtraffic,exceptfortheapplicationsyouspecifybyclickingtheTrustbuttontotherightofthisoption.Fora“trusted”application,allnetworkactivityisallowed.

Create custom rules

Thisoptiongivesyoufullcontroloverthefirewallsettings.Youcancreatecustomrulesforalltrafficusingtheadvancedfirewallconfigurationeditor.

Thisisanadvancedoption,andyoushouldonlyuseitifyouunderstandtheeffectsofthechangesyoumake.

ToopentheAdvanced firewall configurationdialogbox,clickCustomizetotherightoftheCreate custom rulesoption.

Forfulldetailsofallthefirewalloptions,seeSophosClientFirewallHelp.

5.


�6

10 Checking computers are protectedYourcomputersarefullyprotectedifon-accessscanningisrunning,thefirewallisenabled(ifinstalled),andthecomputersareuptodate.

Toseeifcomputersareprotected,checkthecomputerlistinSophosControlCenter.

Thefirewall-relatedinformationsuchasthefirewallstatuswillonlyappearinSophosControlCenterifyouareusingtheSophosSecuritySuiteorSophosComputerSecurityproduct.

IntheUp to datecolumn,theword“Yes”showsthatSophosprotectionisuptodateonthatcomputer.Aclockiconandtheword“No”showsthatitisnot.

Tosortthelistofcomputersaccordingtowhethertheyareuptodateornot,clickontheUp to datecolumnheading.

Foradviceonwhattodoifcomputersareoutofdate,seeSophosControlCenterHelp,thesection“HowdoIupdatecomputers?”

IntheAnti-viruscolumn,theword“Active”showsthaton-accessscanningisprotectingthecomputer.Agrayed-outshieldandtheword“Inactive”showsthatitisnot.

Aslongasyourusers’computersareprotectedbyon-accessscanning,youdonotnormallyneedtorunon-accessscanningonyourfileserver.

Foradviceonwhattodoifcomputersarenotprotectedbyon-accessscanning,seeSophosControlCenterHelp,thesection“HowdoIconfigurescanning?”

Ifthesoftwareisnotinstalledonthecomputer,youwillsee“Notinstalled”displayedintheAnti-Viruscolumn.


�7

Foradviceonwhattodoifcomputersarenotprotectedbytheanti-virussoftware,seeSophosControlCenterHelp,thesection“HowdoIprotectnewcomputers?”

IntheFirewallcolumn,theword“Active”showsthatfirewallisprotectingthecomputer.Agrayed-outfirewalliconandtheword“Inactive”showsthatitisnot.Ifthesoftwareisnotinstalledonthecomputer,youwillsee“Notinstalled”displayedinthiscolumn.

Foradviceonwhattodoifcomputersarenotprotectedbythefirewall,seeSophosControlCenterHelp,thesection“HowdoIconfigurethefirewall?”

IntheCentral configurationcolumn,theword“Ok”showsthatthecomputercomplieswiththeanti-virus,updating,andfirewallconfigurationthatissetcentrallyviaSophosControlCenter.Theword“Changed”andayellowalerticonshowthatitdoesnot.Formoreinformationaboutthestatusesthataredisplayed,refertoSophosControlCenterHelp,thesection“HowdoImonitorprotectedcomputers?”


�8

11 Setting up scanning for potentially unwanted applications

Bydefault,SophosAnti-Virusdetectsviruses,Trojans,spyware,andworms.Youcanalsoconfigureittodetectpotentiallyunwantedapplications(PUAs).

ThisoptionappliesonlytoSophosAnti-VirusrunningonWindows�000orlater.

Sophosrecommendsthatyoubeginbyusingascheduledscantodetectpotentiallyunwantedapplications.Thisletsyoudealsafelywithapplicationsthatarealreadyrunningonyournetwork.Youcanthenenableon-accessdetectiontoprotectyourcomputersinfuture.

Step 1 Run a scheduled scan of the computers.

InSophosControlCenter,ontheConfigurationmenu,clickConfigure scanning.

IntheConfigure scanning settingsdialogbox,intheScheduled scanning panel,clickAddtocreateanewscan,orselectascaninthelistandclickEdittoeditit.

IntheScheduled scan settingsdialogbox,clickConfigure(atthebottomofthepage).

1.

�.

�.


�9

IntheScanning and cleanup settingsdialogbox,clicktheScanningtab.IntheOther scanning optionspanel,makesurethatScan for potentially unwanted applicationsisselected.ClickOK.

Whenthescaniscarriedout,SophosAnti-Virusmayreportsomepotentiallyunwantedapplications.Youcaneitherauthorizetheapplicationsorremovethemfromthecomputers.

Step 2 Authorize applications you want to use.

OntheConfigurationmenu,clickConfigure scanning.

IntheConfigure scanning settingsdialogbox,clickAuthorize applications.

IntheAuthorize applicationsdialogbox,intheKnown applicationslist,selecttheapplicationyouwanttoauthorize.ClickAddtoaddittothelistofauthorizedapplications.Repeatforeachapplicationyouwanttoauthorize.ClickOK.

Ifyoucannotseetheapplicationyouwanttoauthorize,clickNew entry.IntheAdd new applicationdialogbox,followthelinktoSophoslistofpotentiallyunwantedapplications.FindtheapplicationyouwanttoauthorizeandenteritsnameintheNamefield.ClickOK.

4.

5.

6.

7.

8.


�0

Step 3 Clean up applications you do not want to use.

IntheSummary of threatspane,clickthePotentially unwanted applicationslink.TheResolve alerts and errorsdialogboxappears,withtheApplication alertstabdisplayed.

OntheApplication alertstab,selectthecheckboxforeachapplicationyouwanttoremove,orclickSelect all,andthenclickCleanup.

Tofullycleansomeapplicationsconsistingofseveralcomponentsfromacomputer,youmayneedtorestartthecomputer.Ifthisisthecase,amessagewillappearontheaffectedcomputer,givinganoptiontorestartthecomputerimmediatelyorlater.Thefinalcleanupstepswillbeperformedafterthecomputerisrestarted.

Step 4 Enable on-access scanning for potentially unwanted applications.

Ifyouwanttoenableon-accessscanning,intheConfigure scanning settings dialogbox,clickOn-access.IntheOn-access scan settingsdialogboxthatappears,underScanning options,selectScan for potentially unwanted applications.ClickOK.

Someapplications“monitor”filesandattempttoaccessthemfrequently.Ifyouhaveon-accessscanningenabled,itdetectseachaccessandsendsmultiplealerts.

9.

10.

11.


�1

Glossary

Cleanup

Aprocessthateliminatesthreatsonyourcomputer.Inparticular,itremovesavirusfromafileorbootsector,orpotentiallyunwantedapplicationfromthecomputer.However,itdoesnotundoanyactionsthevirusorapplicationhasalreadytaken.

Potentially unwanted application (PUA)

Aprogramthatisnotinherentlymalicious,butisgenerallyconsideredunsuitableforthemajorityofbusinessnetworks.Potentiallyunwantedapplicationsperformactionssuchasdisplayingadvertising,trackingwebsitesvisited,orchangingtheconfigurationofacomputer.Theyincludeawiderangeofprogramssuchasadware,dialers,remoteadministrationtools,andhackingtools.

Sophos Control Center management console

Userinterfacefromwhichyoucanprotectandmanagecomputersonyournetwork

Sophos Control Center management server

AcomponentthatenablesthedownloadinganddistributionofSophossecuritysoftwareandhandlesmessaging


��

Appendix 1. Upgrading an additional Sophos Control Center console

Ifyouuseanadditional(remote)SophosControlCentermanagementconsoleandwanttoupgradeit,doasfollows:

LogonasanadministratoratthecomputerwheretheremoteSophosControlCenterconsoleisinstalled.

CloseallopenSophosapplications,ifany.

InserttheSophosInstallCD.TheCDshouldauto-run.IftheCDdoesnotauto-run,browsetotheCDanddouble-clickLaunchcd.exe.OntheUpgradingpageoftheSophosCDViewer,followthe Upgrade an additional Sophos Control Centerlink,andthenclicktheInstallbutton.

Alternatively,downloadtheSophosControlCenterInstallerfromtheSophoswebsite.Gotowww.sophos.com/support/updates,entertheusernameandpasswordsuppliedtoyoubySophos,followthelinkstodownloadtheinstallerforyourSophosSmallBusinessSolutionsproduct,andthenruntheinstaller.

OntheWelcomepageoftheSophosControlCenterInstallationWizard,clickNext.

OntheLicense Agreementpageofthewizard,readthelicenseagreement.Ifyouagreetothetermsoftheagreement,clickI accept the terms in the license agreement.ClickNext.

OntheDestination Folder page,youseethefolderwhereSophosControlCenterwillbeinstalled.Ifyouwanttochangethedestinationfolder,clicktheChangebuttonandbrowsetothenewfolder.ClickNext.

1.

�.

�.

4.

5.

6.



��

OntheSetup Typepage,selectManagement Console Only,andthenclickNext.

OntheManagement Servicepage,youseethenameofthecomputerwhereSophosManagementServiceisrunning(usuallythecomputerwhereSophosControlCenterisinstalled).YoucanchangethenameofthecomputerbyclickingChangeandbrowsingtothecomputer.ClickNext.

7.

8.


�4

OntheReady to Install the Programpage,clickInstall.

Whentheupgradeiscomplete,youarepromptedtologofforrestart.ClickYesorFinish.

YouhaveupgradedtheSophosControlCenterremotemanagementconsole.

Forinstructionsonhowtoupgradeyournetworkedcomputers,gotoChapter6.

9.

10.


�5

Appendix 2. Proxy detailsIfyouuseaproxyservertoaccesstheinternet,youmustenableSophosControlCentertodownloadupdatesviatheproxy.YoucandosoafteryoustartedSophosControlCenterforthefirsttimeaftertheupgrade,usingtheSophos network protection wizard.

OntheSophos download account detailspageofthewizard,clicktheAdvancedbutton.

IntheAdvanced settingsdialogbox,clicktheProxytab.

SelecttheAccess the internet via proxycheckboxandtypetheproxyaddressandportnumber.

Typetheusernameandpasswordforanaccountthathasaccesstotheproxy.

Youcanenterthesedetailslater,ifyouwantto.Todothis,inSophosControlCenter,ontheActionmenu,clickConfigure updating.IntheConfigure updatingdialogbox,clicktheProxytab,andenterthedetailsthere.

1.

�.

�.

4.


�6

Appendix 3. Changing the download folderBydefault,Sophossoftwareandupdatesaredownloadedtothesharedfolder\\Servername\Sophos,whereServernameisthenameofthecomputerthatisrunningSophosControlCenter.Thesubfolderswheresoftwareforeachoperatingsystemisdownloadedandfromwhichitistheninstalledandupdatedareasfollows.

SophosAnti-VirusandSophosClientFirewallforWindows�000andlater:

\\Servername\Sophos\SAVSCFXP

SophosAnti-VirusforWindows98/Me:

\\Servername\Sophos\ES9x

SophosAnti-VirusforMacOSX:

\\Servername\Sophos\ESOSX

Youcanchangethelocationwheresoftwareandupdatesaredownloadedbeforetheyareinstalled(forexample,ifyoudonothaveenoughfreediskspaceinthedefaultlocation).YoucandosoafteryoustartedSophosControlCenterforthefirsttimeaftertheupgrade,usingtheSophos network protection wizard.Tochangethedownloadlocation,followthesesteps:

OntheSophos download account detailspageofthewizard,clicktheAdvancedbutton.

IntheAdvanced settingsdialogbox,clicktheDownload foldertab.

IntheLocationfield,clickthedrop-downarrowandselectthelocationyouwanttouse,ortypethenewlocation.Thefoldermustbeshared.

Enterthedetailsforthewrite-accessaccountwhichwillbeusedbySophosControlCenterwhenplacingfilesinthefolder.Youmustcreatethisaccountyourself.

Enterthedetailsfortheread-accessaccountwhichwillbeusedbyeachcomputeronthenetworkwhenfetchingfilesfromthefolder.Youmustcreatethisaccountyourself.ClickOK.

1.

�.

�.

4.

5.


�7

Appendix 4. Protecting computers with the firewall

Ifyouhaven’tinstalledthefirewallwhenupgradingprotectiononthecomputersandrunningtheSophos network protection wizard,youcaninstallitonyourcomputersasdescribedbelow.

YoushouldnotinstallSophosClientFirewallonthecomputerwhereSophosControlCenterisinstalled.

SophosClientFirewallcanbeinstalledonlyonworkstationsrunningWindows�000orlater;itcannotbeinstalledoncomputersrunningserveroperatingsystems.ThefirewallrequiresSophosAnti-Virus.


Toinstallthefirewall:

InSophosControlCenter,inthecomputerlist,highlightthecomputerswhereyouwanttoinstallthefirewall.Onthemenubar,opentheToolsmenuandselectAdd firewall to protected computers.TheFirewall installation wizardstarts.

OntheWindows user account detailspageofthewizard,enterthedetailsofanadministratoraccountyouwillusetoinstallthefirewallonyournetworkedcomputers.ClickNext.

OntheInstall Sophos Client Firewall on workstationspage,selectthecomputerswhereyouwanttoinstallthefirewall.ClickNext.

Youwillseethefirewallbeinginstalledonthecomputers.

OntheComputers you must protect manuallypage,youwillseealistofcomputers,ifany,thatrequiremanualinstallationofthefirewall.ClickPrint toprintthelist.Completethewizard.

Gotoeachcomputerontheprintedlist,logonasanadministrator,andinstallSophosClientFirewallasfollows.

Browsetotheupdatesfolder(bydefault,\\Servername\Sophos\SAVSCFXP),andrunsetup.exe.IntheSetupdialogbox,selecttheInstall Sophos Client FirewallcheckboxandclickOK.

1.

�.

�.

4.

5.


�8

Technical supportFortechnicalsupport,visitwww.sophos.com/support.

Ifyoucontacttechnicalsupport,provideasmuchinformationaspossible,includingthefollowing:

Sophossoftwareversionnumber(s)

Operatingsystem(s)andpatchlevel(s)

Theexacttextofanyerrormessages

http://www.sophos.com/support


�9

Copyright �006 Sophos Group.All rights reserved.Nopartofthispublicationmaybereproduced,storedinaretrievalsystem,ortransmitted,inanyformorbyanymeans,electronic,mechanical,photocopying,recordingorotherwiseunlessyouareeitheravalidlicenseewherethedocumentationcanbereproducedinaccordancewiththelicencetermsoryouotherwisehavethepriorpermissioninwritingofthecopyrightowner.

Sophos and Sophos Anti-Virus are registeredtrademarks of Sophos plc and Sophos Group. Allother product and company names mentionedare trademarks or registered trademarks of theirrespectiveowners.

Copyright and licensing information for ACE™, TAO™, CIAO™, and CoSMIC™

ACE1, TAO�, CIAO�, and CoSMIC4 (henceforthreferred to as “DOC software”) are copyrightedby Douglas C. Schmidt5 and his research group6 atWashington University7, University of California8,Irvine, and Vanderbilt University9, Copyright©199�–�005,allrightsreserved.

SinceDOCsoftwareisopen-source10, freesoftware,you are free to use, modify, copy, and distribute–perpetuallyandirrevocably–theDOCsoftwaresourcecode and object code produced from the source,as well as copy and distribute modified versionsof this software. You must, however, include thiscopyrightstatementalongwithcodebuiltusingDOCsoftware.

You can use DOC software in commercial and/orbinarysoftwarereleasesandareundernoobligationtoredistributeanyofyoursourcecodethatisbuiltusing DOC software. Note, however, that you maynotdoanythingtotheDOCsoftwarecode,suchascopyrightingityourselforclaimingauthorshipoftheDOCsoftwarecode,thatwillpreventDOCsoftwarefrombeingdistributed freelyusinganopen-sourcedevelopmentmodel.Youneedn’tinformanyonethatyou’reusingDOCsoftwareinyoursoftware,thoughweencourageyoutoletus11knowsowecanpromoteyourprojectintheDOCsoftwaresuccessstories1�.

DOCsoftware isprovidedas iswithnowarrantiesof any kind, including the warranties of design,merchantability,andfitnessforaparticularpurpose,

noninfringement,orarisingfromacourseofdealing,usageortradepractice.Moreover,DOCsoftwareisprovidedwithnosupportandwithoutanyobligationon the part of Washington University, UC Irvine,Vanderbilt University, their employees, or studentsto assist in its use, correction, modification, orenhancement.Anumberofcompanies1�aroundtheworldprovidecommercialsupportforDOCsoftware,however.DOCsoftwareisY�K-compliant,aslongastheunderlyingOSplatformisY�K-compliant.

Washington University, UC Irvine, VanderbiltUniversity,theiremployees,andstudentsshallhavenoliabilitywithrespecttotheinfringementofcopyrights,tradesecretsoranypatentsbyDOCsoftwareoranypartthereof.Moreover,innoeventwillWashingtonUniversity,UCIrvine,orVanderbiltUniversity,theiremployees,orstudentsbeliableforanylostrevenueorprofitsorotherspecial,indirectandconsequentialdamages.

The ACE14, TAO15, CIAO16, and CoSMIC17 websites are maintained by the DOC Group18 at theInstitute for Software Integrated Systems (ISIS)19and the Center for Distributed Object Computingof Washington University, St. Louis�0 for thedevelopmentofopen-sourcesoftwareaspartoftheopen-source software community�1. By submittingcomments, suggestions, code, code snippets,techniques(includingthatofusage),andalgorithms,submitters acknowledge that theyhave the right todo so, that any such submissions are given freelyand unreservedly, and that they waive any claimsto copyright or ownership. In addition, submittersacknowledgethatanysuchsubmissionmightbecomepart of the copyright maintained on the overallbody of code, which comprises the DOC software.By making a submission, submitter agree to theseterms.Furthermore,submittersacknowledgethattheincorporationormodificationof such submissionsis entirely at the discretion of the moderators ofthe open-source DOC software projects or theirdesignees.

The names ACE, TAO, CIAO, CoSMIC,WashingtonUniversity, UC Irvine, and VanderbiltUniversity,maynotbeusedtoendorseorpromoteproducts or services derived from this sourcewithoutexpresswrittenpermissionfromWashingtonUniversity, UC Irvine, or Vanderbilt University.Further,productsorservicesderivedfromthissourcemaynotbecalledACE,TAO,CIAO,orCoSMICnormay the name Washington University, UC Irvine,


40

or Vanderbilt University appear in their names,withoutexpresswrittenpermissionfromWashingtonUniversity,UCIrvine,andVanderbiltUniversity.

Ifyouhaveanysuggestions,additions,comments,orquestions,pleaseletme��know.

DouglasC.Schmidt��

TheACEhomepageishttp://www.cs.wustl.edu/ACE.html

References

1.http://www.cs.wustl.edu/~schmidt/ACE.html�.http://www.cs.wustl.edu/~schmidt/TAO.html�.http://www.dre.vanderbilt.edu/CIAO/4.http://www.dre.vanderbilt.edu/cosmic/5.http://www.dre.vanderbilt.edu/~schmidt/6.http://www.cs.wustl.edu/~schmidt/ACE-members.html7.http://www.wustl.edu/8.http://www.uci.edu/9.http://www.vanderbilt.edu/10.http://www.the-it-resource.com/Open-Source/Licenses.html11.mailto:[email protected]�.http://www.cs.wustl.edu/~schmidt/ACE-users.html1�.http://www.cs.wustl.edu/~schmidt/commercial-support.html14.http://www.cs.wustl.edu/~schmidt/ACE.html15.http://www.cs.wustl.edu/~schmidt/TAO.html16.http://www.dre.vanderbilt.edu/CIAO/17.http://www.dre.vanderbilt.edu/cosmic/18.http://www.dre.vanderbilt.edu/19.http://www.isis.vanderbilt.edu/�0.http://www.cs.wustl.edu/~schmidt/doc-center.html�1.http://www.opensource.org/��.mailto:[email protected]��.http://www.dre.vanderbilt.edu/~schmidt/

Documents

Sophos Small Business Solutions 2.0 upgrade guide