INFORMATION SYSTEMS

Sophos Anti-Virus Deployment

Last Updated: 11/2/2015 AW

Contents
Sophos Deployment Matrix .................................................................................................................... 1
Installing Sophos ..................................................................................................................................... 2
Generating Sophos Installer .................................................................................................................... 3
Create Email Alias ............................................................................................................................... 3
Generate Sophos Installer................................................................................................................... 3
IP Camera Scanning Exemption .............................................................................................................. 4

.oOo.

Sophos Deployment Matrix

When installing Sophos Anti-Virus, please follow the following matrix.
Correct installation would ensure accurate financial charge-back.

The location of the installers is in: \\cammgt04\Sophos

Organisation Installer (.exe) Notes

CAM CAM_SophosInstall
CDF CAM_SophosInstall
Mannix Library CAM_SophosInstall
Catholic Theological College CAM_SophosInstall
Corpus Christi College CAM_SophosInstall
Justin Villa CAM_SophosInstall
CAM Seminarian CAMSeminarian_SophosInstall Corpus Christi Seminarians
LSP LSP_SophosInstall
VCC VCC_SophosInstall
Training location IT_Training_SophosInstall Strathmore & Scoresby
CAM Parish <Parish Name>_SophosInstall eg. Thornbury.Sophos_Install
Bendigo Parish Bendigo.<Parish Name>_SophosInstall To be created
Rockhampton Parish Rockhampton. <parish name>_Sophos_Install To be created
Catholic Leadership Centre Do not install Sophos

Document1
 INFORMATION SYSTEMS

Installing Sophos
Prerequisite: working internet connection

1. Copy the installers from \\cammgt04\Sophos to a USB drive

2. Copy the correct installer (see matrix above) to temporary folder C:\Temp
(create it if it does not exist)
3. Run the installer
Select yes when prompted to remove conflicting antivirus application
4. Let the installer run and download the programs/updates from the Internet
5. Update the Device information in GreenTree
Go to CRM > Asset Management > Physical Assets

Select Custom Tab > IT Sophos.

Tick the IT Sophos Load and update the User Assigned fields

6. If the installation is for a specific Parish or Agency deployment, Update the Organisation in
GreenTree:
Go to CRM > Relationship > Organisation

Update the Custom > Sophos Deploy tab.

Document1
 INFORMATION SYSTEMS

Generating Sophos Installer

There are 2 major steps in generating an installer for a site/organisation. Creation of email Alias and
generating the installer from Sophos Website:

Create Email Alias

1. Login to CAMMGT04
2. Open Exchange management console
Note: You need prior administration rights. Please contact the Exchange Administrator.

3. Open the account Admin SDesk > Properties > Email Addresses
4. Add email Alias with the format <Parish name>.Sophos@cam.org.au
eg. Thornbury.Sophos@cam.org.au

Generate Sophos Installer

1. Open http://cloud.sophos.com
2. Login: tony.reid@cam.org.au / <Password in PassSafe> To wait for new admin account
3. Groups > new group. Eg. CAM Parish
4. Users & Devices > Users > Add User
5. Add > eg. Thornbury.Sophos@cam.org.au
User Name = <Parish Name>, eg. Thornbury Parish
Email Address = <Created Alias above> eg. Thornbury.Sophos@cam.org.au
Select appropriate group e.g. CAM Parishes
Tick Email Setup Link

6. Login using OWA (or connect to Admin SDesk (a-sdesk) Email in Outlook)
7. Download the link and rename it appropriately eg. Thornbury_SophosInstall.exe
Download directory is: \\cammgt04\Sophos

Document1
 INFORMATION SYSTEMS

IP Camera Scanning Exemption

There is a known problem which Sophos Web Intelligence Service would block IP camera operations.
Refer to GreenTree sr24426. The solution which was provided by Sophos (case #4680205) is to add
network exclusion from cloud.sophos.com

Login to cloud.sophos.com
Users & Devices > Policies
Edit Base Policy
Add 10.170.2.0/24 in the scanning exemption

Wait for 2-3 hours for the policy to propagate fully before testing.

Document1