Some of you will know that Sophos is my, ahem, favourite anti-virus product. However it was the product of choice at the time (they are now moving to McAfee) for a large school district I deal with hence I had no choice but to remain acquainted with it irrespective of it’s poor performance (Sophos have advised to leave real-time scanning *off* for performance reasons?!?), it’s poor management console (customer had to write their own deployment scripts for reliable deployment) and poor customer service from Sophos.
I wrote a small script to prepare Sophos for PVS deployment on XenApp and XenDesktop machines, run this script just prior to shutting down your Private mode image and switching back to Standard.
When I have a spare few minutes I may even see if I can another feature – it could be run via GPO as a machine shutdown script that only executes if the image is in private mode, which would save you having to run it manually. I haven’t figured out how to do this yet, if you do know please drop me a comment below.
Refer to https://www.sophos.com/en-us/support/knowledgebase/12561.aspx for more detail on what each key/service etc does.
Sophos helps you secure your virtualized servers and virtual desktop infrastructure (VDI) with an ultra-thin agent optimized for VMware vSphere and Microsoft Hyper-V environments, or our full-featured server-specific security.
Sophos Vdi Install
Sophos Enterprise Console enables you to detect and block 'controlled applications', that is, legitimate applications that are not a security threat, but that you decide are unsuitable for use in your office environment. Such applications may include instant messaging (IM) clients, Voice over Internet Protocol (VoIP) clients, digital imaging software, media players, or browser plug-ins.
Sophos Advisory: Customers are not able to access any Central Dashboards due to ongoing Microsoft Azure outage. March 15 Sophos Advisory: Central and Enterprise Dashboard - Some customers are unable to add or edit the 'Custom Rules' section within the Federation Login global setting. 1 About this guide This guide tells you how to: Use Sophos for Virtual Environments to provide central threat protection for virtual machines (VMs) in a VMware ESXi or Microsoft Hyper-V environment. Use Sophos Central to manage Sophos for Virtual Environments. If you are migrating to Sophos for Virtual Environments, see Migrate to Sophos for Virtual.
Applications can be blocked or authorized for different groups of computers with complete flexibility. For example, VoIP can be switched off for office-based desktop computers, yet authorized for remote computers.
The list of controlled applications is supplied by Sophos and updated regularly. You cannot add new applications to the list, but you can submit a request to Sophos to include a new legitimate application you would like to control on your network.
For details, see knowledgebase article 63656.
Sophos Vdi Best Practices
This section describes how to select the applications you want to control on your network and set up scanning for controlled applications.
If you use role-based administration:
- You must have the Policy setting - application control right to configure an application control policy.
- You cannot edit a policy if it is applied outside your active sub-estate.
Sophos Vdi Security
For more information about role-based administration, see Managing roles and sub-estates.
Application control events
When an application control event occurs, for example, a controlled application has been detected on the network, the event is written in the application control event log that can be viewed from Sophos Enterprise Console. For details, see View application control events.
Sophos Vdi Mac
The number of computers with events over a specified threshold within the last seven days is displayed on the Dashboard.
You can also set up alerts to be sent to your chosen recipients when an application control event has occurred. For details, see Set up application control alerts and messages.