Sophos NAC Advanced: how to configure Internet Explorer for the Web Agent
This article describes the Internet Explorer (v. 5.0 or higher) configuration requirements for the Sophos NAC Web Agent.
- Administrative rights are required on the endpoint to download the Web Agent. The Microsoft restricted user mode cannot download ActiveX controls.
- Windows Server 2003 endpoints must uninstall the Internet Explorer Enhanced Security Configuration Windows component for Internet Explorer to be able to browse. The Microsoft default setting restricts browsing. For more information on this component, refer to the Microsoft white paper: Managing Internet Explorer Enhanced Security Configuration.
What to do
Note: The options displayed by Internet Explorer may vary slightly according to your environment. If a specific option described below is not displayed by Internet Explorer, you can disregard it.
The required security settings must be specified for the Web content zone where you install the Web Agent.
In Internet Explorer, select Internet Options > Security > CustomLevel. In the Security Settings dialog box, ensure the following are enabled:
- Run components signed with Authenticode
- Automatic prompting for ActiveX controls
- Download signed ActiveX controls
- Run ActiveX controls and plug-ins
- Script ActiveX controls marked safe for scripting
Refer also to the knowledgebase article: How to install Vista ActiveX Installer Service for the Web Agent.
If you need more information or guidance, then please contact technical support.
- Article ID: 24695
- Created: 19 Apr 2007
- Last updated: 10 Oct 2008
