710 likes | 831 Vues
This training provides a comprehensive technical overview of Sophos Small Business Edition 4. Participants will learn to set up a Windows server with workstations, qualify key system requirements, and understand the solution architecture. By completing this course, attendees will also be able to manage deployment from Sophos Control Center, identify key components, and highlight differences with Sophos Endpoint Security. Additional resources for Sophos products will be shared, ensuring participants are well-equipped for effective implementation and management.
E N D
Small Business Edition 4 C707 – Technical overview
Prerequisites Prior to takingthis training youshouldbe able to setup • a Windows server • with Windows workstations • in a production environment
Course objectives By completing this training you will be able to: • qualify the main system requirements • describe the solution architecture as well as the installation and management tasks to a technical audience • highlight the differences with Sophos Endpoint Security and Control 9 • list additional Sophos online resources 3
Agenda Solution components Solution architecture System requirements and deployment Management from Sophos Control Center Management at the endpoint Endpoint Security & Control 9 Online resources 4
Small Business Edition 4 Solution components
Section objectives Upon completion of this section you will be able to identify which components are part of: • Sophos Small Business Security suite • Sophos Small Business Computer security • Sophos Small Business Anti-Virus
Solution components PureMessage and SafeGuard are covered in a separate training
Small Business Edition 4 Solution architecture
Section objectives Upon completion of this section you will be able to: • list the components that comprise the solution • describe each of the components with reference to the product architecture Section agenda • SophosLabs • Updating • Management
SophosLabs • Anti-Malware (Viruses, worms, trojans, rootkits & spywares) • Anti-Adware • HIPS • Application control • Anti-Spam • URL risk classification • Genotype (detects up to 85% of new malware)
Central installation directories • \\<server name>\SophosUpdate\CIDs Sophos Control Center
Sophos Control Center • Find and populate endpoints • Deploy • Configure the client software • Monitor the network • Take actions • Generate reports and alerts • Store all data in SQL server database
Client side components • Sophos Anti-Virus • Sophos Endpoint Security and Control client • Sophos Client FireWall • Sophos AutoUpdate • Sophos RMS agent
Sophos Update Manager Messagerouter SophosAnti-Virus ClientFirewall AutoUpdate Messagerouter Agent Management server ControlCenter SCCdatabase Communication overview Clientside RMS Serverside COM Console
Section review • What are the main roles of: • Sophos Endpoint Security and Control client? • Sophos Client-Firewall? • Sophos Console Center? • RMS? • CIDs? • Sophos AutoUpdate? • SophosLabs?
Small Business Edition 4 System requirements and deployment
Section objectives Upon completion of this section you will be able to: • qualify the main system requirements for the management software components and endpoint software components • list the main steps of Sophos Control Center deployment • list the main steps involved in a typical endpoint deployment
Sophos Control Center *Windows XP, Vista , 7 and 2000 pro have performance limitations, especially with CIDs
Endpoint client http://www.sophos.com/products/all-sysreqs.html for more details
Installation of Sophos Control Center Main steps: • Installation of Microsoft .Net Framework and Msxml • Complete setup • Optional feedback to Sophos • Software installationincl. SQL Express 2005 andcreation of SophosUpdateMgr • Server restart • Sophos download account • Selection of client platforms • Download of client software
Upgrades from SCC version 2 • Read the upgrade guide • Upgrade of Sophos Control Center is automatic • Upgrade of the endpoint client is automaticon Windows 2000/XP/2003/Vista/2008/7 • Upgrade requires to run setup onWindows 98 and Macintosh
Typical steps for endpoint deployment • Protect new computers • Windows user account (must be valid on all computers) • Search & select computers • Select features • Deploy via task scheduler • See startup guide for details
Manual installation • When installation from the console fails • For Windows 98 and Macintosh • Run setup from • \\servername\SophosUpdate\CIDS
Competitor Removal Tool (CRT) • detects 3rd party anti-virus • detects 3rd party firewalls (except Windows and VPN clients) • stops installation upon detection • optionally removes 3rd party security software • can be customizedby Sophos • Run avremote.exeto test
Section review • List the operating systems supported by • Sophos Control Center 4 • Sophos Anti-Virus • Sophos Client Firewall • List 2 cases which require a manual installation • Where can you find more details on how to prepare your network?
Small Business Edition 4 Management from Sophos Control Center
Section objectives • Upon completion of this section you will be able to describe the main management tasks which can be completed from Sophos Control Center
Section agenda • Central configuration • Configure scanning • Configure updating • Configure firewall • Configure application control • Configure device control • Dashboard and alerts • Smart views • Resolve alerts and errors • Event viewers • Reports
Configure scanning (continued) • Recommended steps: • Detect and alert only • Authorize unwanted detections • Block (Block may require to test installation of new applications)
Configure Firewall • Monitor operational mode: Easily create rules
Section review • What are the main roles of: • Event viewers • Smart views • Dashboard • Device control • Application control • Authorization Manager • Where can you acknowledge and delete alerts? • Where can you see which users have attached an Ipod to their corporate computer? • How can you set a separate configuration for one server?
Small Business Edition 4 Management at the endpoint
Section objectives Upon completion of this section you will be able to: • describe the main management tasks which can be completed at the endpoint • describe which features are available on each supported platform Section agenda • End user experience on Windows • End user experience on Macintosh • Management of threats at the endpoint • Features by platform
End user experience on Windows Installing or updating Client installed Message for user Failing to update