Sophos

Online support

Product maintenance

Contact support

Support services

Upgrading Sophos Anti-Virus in a NetWare environment

This document describes how to upgrade Sophos Anti-Virus when installed in a NetWare environment. For information on installing Sophos Anti-Virus in a NetWare environment, see the NetWare network startup guide.

This major upgrade is for the Windows administration software, and Sophos Anti-Virus for Windows 2000+ on your networked computers. It is not for the installation of Sophos Anti-Virus on your NetWare server, which has a minor update.

Background assumptions

  1. You have an account for administering and updating Sophos Anti-Virus. See the NetWare network startup guide for instructions on how to create an account.
  2. You are using Sophos Enterprise Console to configure the computers on your network (if not to administer them). See Standalone EM Library (below) if you are not.

What to do

Before starting, check and note down the following:

Note:

1. Backing up your old installation

Before upgrading, ensure that you have a complete backup of your Sophos Enterprise Console installation, and that you can recover the system from that backup. If the upgrade fails, you will need to restore your system setup to its previous state from this backup.

To make a backup, go to the computer where you installed the management server database and Enterprise Console, and do as follows:

  1. Back up your database. The default installation folder for the database is C:\Program files\Microsoft SQL Server\MSSQL$SOPHOS.
  2. Export the following registry key:
    HKLM\SOFTWARE\Sophos\Certification Manager

If you later need to restore the installation to its previous state, do as follows:

2. Preparing for installation

Do the following before installing.

3. Upgrading Enterprise Console and EM Library

These notes assume that all Enterprise Console components (management console, management server, database, and EM Library) are installed on the same computer.

Note: If you install on a Windows 2000 computer, it will need to be restarted after installation.

  1. Log on as an administrator at the Windows computer where version 2 of Enterprise Console is installed.
  2. Close any open Sophos applications.
  3. If you have the Sophos Network Install CD:
    • Insert the Sophos Network Install CD.
    • The CD should auto-run.
    • If the CD does not auto-run, browse to the CD and double-click Launchcd.exe.
    • On the Welcome page, click 'Install'.
    Or you can run from a download:
    • Download the Sophos Endpoint Security and Control Network Installer from the Sophos website.
    • Run it.
  4. On the Welcome page of the Sophos Enterprise Console InstallShield Wizard, click 'Next'.
  5. On the License Agreement page of the wizard, read the license agreement and click "I accept the terms in the license agreement" if you agree to the terms. Click 'Next'.
  6. On the Database page of the wizard, select whether you want to populate the database now or later (e.g. if you want to preview the scripts before running them on your SQL Server database).
    • Populate database now - select this option if you want the installer to create tables and stored procedures in the database.
    • Populate database later - select this option to create scripts that you will use to populate the database later. Script files will be created in your installation directory, usually C:\Program Files\Sophos\ Enterprise Console\DB.
  7. Click 'Next'.
  8. On the 'Feedback to Sophos' page, read the information carefully. Select 'I agree' if you agree to provide feedback to Sophos.
    • If you selected 'I agree', the second 'Feedback to Sophos' page is displayed.
    • If you want to enable Sophos customer support to contact you directly, e.g. if there is a platform or version issue, enter your EM download username and/or contact email address.
      You need not provide the username or email address if you are happy to report this information but would like to remain anonymous.
    • If you decide at any time that you want to stop sending reports, you can do so by changing your Enterprise Console settings. For more information, see Enterprise Console user manual or Help section "How do I turn reporting to Sophos on or off?".
  9. Click 'Next'.
  10. On the 'Ready to Install' page, click 'Install'.
  11. When upgrade is complete, you are prompted to log off or restart (on Windows 2000).
  12. Click 'Yes' or 'Finish'.

If you selected 'Populate database later' on the Database page, refer to Appendix A of the Windows network upgrade guide for further instructions.

If you use a remote management console, upgrade it as described in section 6.3 of the Windows network upgrade guide.

Note: If the database contains a significant number of alerts, it may take some time for the console to display information about managed computers when you start the console for the first time after the upgrade.

4. Downloading the software

To receive installations and updates for Sophos Anti-Virus for Windows, version 7, and updates for Sophos Client Firewall, version 1, you need to specify an alternative databank to the one from which EM Library currently downloads updates (the 'primary parent').

5. Verifying existing policies

After the upgrade, your updating, anti-virus, and firewall settings will be retained. Check your settings as follows.

Checking the policies for each group

  1. In Enterprise Console, in the Groups pane, right-click a group to display a menu.
  2. Select 'View group policy details'.
  3. In the 'Group details' window, verify that the group is assigned the right policies.
  4. If not, for a policy type, select a different policy from the drop-down list and confirm your selection.

Viewing the list of groups that a policy is assigned to

  1. In the Policies pane, right-click a policy to display a menu.
  2. Select 'View groups using policy'.
  3. In the 'Groups using this policy' window, verify that the policy has the right groups assigned to it.

View policy settings

  1. In the Policies pane, double-click a policy type, e.g. Updating.
  2. Double-click the policy you want to view.
  3. In the dialog box that is displayed, review the settings.

For more information about policy settings, see the Enterprise Console user manual and Help files.

6. Policies for new features

To configure new policy settings (e.g. HIPS or application control) for Windows 2000+ computers, follow the instructions in section 9 of the Sophos Anti-Virus for Windows network upgrade guide.

Note: Even if you do not use Enterprise Console on your network, you can compile and export settings for the new policies with ExportConfig, and import them to your workstations with ConfigCID. See the NetWare network startup guide, section 11, 'Protect Windows computers without using Enterprise Console' for details.

If you need more information or guidance, then please contact technical support.