Tag Archives: Anti-virus

Sophos Anti-Virus Updates to 10.3.x – Restart Required

College-managed Windows computers which have Sophos EndPoint Security suite installed have automatically received a Sophos update to version 10.3.x. This update requires a reboot of the computer to complete.

Middlebury’s software management application, (KACE), may display a “desktop alert” message requesting that your computer be rebooted to complete the Sophos update. This is a legitimate and valid alert! If you see this KACE “desktop alert” message, please save your files and restart your computer as soon as possible, thank you.

Questions related to this update may be directed to infosec@middlebury.edu.

Does My Computer Need More Than Sophos Anti-Virus?

Since the College’s switch from Symantec to Sophos anti-virus software, other  anti-spyware/malware products should no longer be installed on computers as they can conflict with Sophos and cause performance issues.  In the past, LIS recommended the use of products such as Malwarebytes, Spybot and Ad-Aware; this is no longer the case.  Why this change?  Newer anti-virus/anti-spyware products typically include a feature called “on-access” scanning that watches all changes to files on your computer’s hard drive.  Sophos performs on-access monitoring so the use of additional programs such as Malwarebytes can slow down your computer or cause it to crash due to conflicts between the competing scans.

If you have additional av/malware software installed and need assistance with their removal — or aren’t sure and have questions — please contact the Technology HelpDesk at 802-443-2200.  For security resources, Sophos FAQs, virus alerts and more, visit go/infosec.

Sophos Deployment

Last month we began the campus rollout of Sophos Anti-virus, which is replacing the Symantec package we have been using for the past several years. We have deployed this anti-virus solution to many Windows based systems across campus. At this point we will continue the deployment to all faculty and staff Windows and Macintosh computers.

For Windows systems this will be delivered across our network using the same mechanism that manages our Windows workstations. To facilitate this deployment we need to ask that all Windows systems be turned off on Friday nights and powered back up on Monday mornings for the next several weekends. The install packages will be pushed across the network when the system is powered back on Monday morning starting March 19th.

If you should need your system over the weekend and you are off campus there will be no impact to this update. It will resume on Monday as scheduled. If you need your computer and are connected to the campus network (other than through the VPN) you will receive the update when you power your computer on.

For the deployment of Sophos to Macintosh computers we will be leveraging a utility called Casper. Casper will allow us to seamlessly remove Symantec and install Sophos. To ensure that Sophos will be successfully installed on your Macintosh system, please install Casper prior to March 16th. For instructions on obtaining Casper please see the Casper installation page at http://go/getcasper. Please note that Casper is licensed for Middlebury-owned systems only.

For information on Sophos please see the FAQ at http://go/sophos. This will answer many questions you may have and should address any issues you may encounter. Prior to the date your system is scheduled for the Sophos install please do the following:

  • Complete any software installs you may have pending, including any Windows Updates.
  • For Macintosh computers, confirm that you have the Self Service application installed in the Application Utility
  • Disable any additional firewalls you may have added beyond the operating system specific firewall. Please note, this is not referring to anti-virus such as Symantec but rather products such as SonicWall.
  • Shut down your system the Friday before the install so that it receives the scheduled install when it powers up on Monday morning.
  • Shut down your system on Monday night (after the scheduled install has occurred).

For faculty and staff who wish to install Sophos on one of their own personal systems, Middlebury is licensed for one copy per employee for home use. To download a copy for your home system please visit the Sophos FAQ at http://go/sophos .

For additional information please see http://go/sophos

 

 

Sophos deployment continues

Last week we began the campus rollout of Sophos Anti-virus; which is replacing the Symantec package we have been using for the past several years. Last week we deployed Sophos to systems which are currently running Windows 7.  This week we will be deploying Sophos to Staff systems have yet to be upgraded. This will be delivered across our network using the same mechanism that manages our Windows workstations. To facilitate this deployment we need to ask that all Windows systems be turned off on Friday nights and powered back up on Monday mornings for the next several weekends. The install packages will be pushed across the network according to the following schedule:

  • February 19th: Windows7 systems
  • February 26th: Remaining  Staff workstations
  • March 4th: Remaining Faculty workstations and computers that have not been addressed in prior groups.

If you should need your system over the weekend and you are off campus there will be no impact to this update. It will resume on Monday as scheduled. If you need your computer and are connected to the campus network (other than through the VPN) you will receive the update when you power your computer on.

For information on Sophos please see the FAQ at http://go/sophos. This will answer many questions you may have and should address any issues you may encounter. Prior to the date your system is scheduled for the Sophos install please do the following:

  • Complete any software installs you may have pending, including any Windows Updates.
  • Disable any additional firewalls you may have added beyond the Windows Firewall. Please note, this is not referring to Anti-virus such as Symantec but rather products such as SonicWall.
  • Shut down your system the Friday before the install so that receives the scheduled install when it powers up on Monday morning.
  • Shut down your system on Monday night (after the scheduled install has occurred).

For additional information please see http://go/sophos

Sophos Anti-Virus for Windows Campus Roll-out

Next week will begin the campus wide release of Sophos Anti-virus for Windows. This will be delivered across our network using the same mechanism that manages our Windows workstations. To facilitate this deployment we need to ask that all Windows systems be turned off on Friday nights and powered back up on Monday mornings for the next several weekends. The install packages will be pushed across the network according to the following schedule:

  • February 19th: Windows7 systems
  • February 26th: Remaining  Staff workstations
  • March 4th: Remaining Faculty workstations and computers that have not been addressed in prior groups.

For information on Sophos please see the FAQ at http://go/sophos. This will answer many questions you may have and will address many issues you may encounter. Prior to the date your system is scheduled for the Sophos install please do the following:

  • Complete any software installs you may have pending, including any Windows.
  • Disable any additional firewalls you may have added beyond the Windows Firewall. Please note, this is not referring to Anti-virus such as Symantec but rather products such as SonicWall.
  • Shut your system down the Friday before the install so that it powers up the Monday morning of the scheduled install. If you power your system up over the weekend the install will start at that time.
  • Shut your system down the Monday night after the install.

For additional information please see http://go/sophos

 

Sophos Client Available for LIS Test

Dear LIS Colleagues:

As posted in the blog earlier this week. We are asking LIS to help us with a test of the Sophos deployment. Endpoint Protection Product. If each Windows user in LIS would please run the executable at the following link it will install the Sophos client onto your Windows system. It will also remove the Symantec anti-virus client from your system. There are some things you should be aware of in this process:

  • When Windows detects the uninstall of Symantec and that you have no anti-virus it will give you a warning. You should ignore this as you are in the process of installing a new package.
  • During the install process Windows Defender, if you have it running, may be disabled. If this occurs Windows will give you a warning. Please ignore this warning.
  • While you are at a state with no anti-virus Windows may offer you a link to install a new Anti-virus. These may also be ignored as you are in the process of installing Sophos.
  • The removal process for Symantec has been seen to take a protracted amount of time on some computers. You need to be patient. It is unusual but 10 minutes is a reasonable amount of time to allow for an install of this package. During this process some systems may stop responding at times.
  • When Sophos has been installed the Gold shield of Symantec will have been replaced with a blue and white shield of Sophos .

For additional information on Sophos check out the FAQ at http://go/itsecurity.

Please click here for the Sophos install package for LIS Windows Users: http://whitetail.middlebury.edu/SohopsUpdate/SophosLIS.exe

Sincerely,

Ian Burke

infosec@middlebury.edu

x5368

Sophos test planned for LIS this week

Dear LIS Colleagues,

This Thursday and Friday we will have representatives from Sophos here on site. They will be helping us to develop a deployment package for the client component of the Sophos Endpoint Protection product which we are using to replace Symantec Anti-Virus. As we complete the development of this deployment package and have tested it thoroughly, we will be initiating a test across the systems in LIS to ensure that the package works on a larger group of systems and also to start a larger test of the client here at Middlebury.

Later this week you will receive a second communication about this test effort and it will also include information about how you can help us to assess the impact of the client on your system and also the install process. For additional information about Sophos please see the FAQ  at http://GO/ITSECURITY. Also, feel free to contact LIS Security at infosec@middlebury.edu or contact Ian Burke at ext. 5368. Thank you for your help and understanding with this process.

Sincerely,

Ian Burke

LIS Network Security Administrator

Sophos Project Timeline

Dear Middlebury Colleagues:

To offer some additional information on the Sophos roll-out the following timeline has been proposed and will be followed by the LIS deployment team for this
project.

  • Email will be converted to the Sophos solution the weekend of January 22, 2012
  • Testing will be conducted on individual systems through the month of January
  • Sophos engineers will be on site to help with a larger test group across LIS and to build a deployment agent on January 25 and 26th
  • Server deployment and will be conducted on test servers and production servers through the month of January and February
  • A second desktop test group will be identified and targeted for the end of January and beginning of February
  • Based on the conclusion of two successful tests deployment will continue to the remainder of the campus in February

If you are interested in being a part of one of the test groups, please contact LIS Information Security at infosec@middlebury.edu. If you would Iike more information about Sophos please check the Infosec web site at go\itsecurity or contact LIS Information Security.

Sincerely,

Ian Burke

LIS-IT Security Administrator