Manual de instalação
Contents
1. clique em View gt Endpoints Mi Sophos Enterprise Console File Edit wiew Actions Groups Policies Events Subscri meee Endpoints v Update Managers Compute y Dashboard w Toolbar Manager y Status Bar Onimanac Bootstrap Locations Conmecte Sophos Update Manager Installer Location 4 Configura es recomendadas Vv Neste item ser demonstrado as configura es recomendadas para novas implementa es do Sophos onde o foco configurar o Sophos para n o causar nenhum bloqueio indesejado mantendo a prote o contra malwares Ap s o per odo de implementa o recomendado ativas os m dulos do Sophos de forma gradual 4 1 Anti virus and HIPS Policies Updating EI Anti virus and HIPS Default E Firewall Ee LET Nac ER Application control EE Data control ngra Device control A Tamper protection Bf Patch AE Web contral 4 1 1 No Sophos Enterprise Console expanda o item Anti virus and HIPS 4 1 2 Clique duas vezes na pol tica de Anti virus and HIPS a ser editada ou clique com o bot o direito e clique em View Edit Policy 4 1 3 Em Enable on access scanning clique em Configure Anti Virus and HIPS Policy Default xX Messaging Sophos Live Protection On access scanning W Enable on access scanning Configure M Enable behavior monitoring Configure Web protection Block acces2. 4 M 3 a Ye E re 3 33 No menu bar clique em View gt Update Managers caso esta op o estiver desabilitada pule para o pr ximo passo Mi Sophos Enterprise Console File Edit View Actions Groups Policies Events Subscri e Disco Endpoints Update Managers Compute yw Dashboard w Toolbar Manager y Status Bar Unmanac Bootstrap Locations Connecte Sophos Update Manager Installer Location 3 34 Clique com o Bot o direito no servidor e clique em View Edit Configuration E Ro jo 3 36 3 37 3 38 3 39 Update managers nmnnnnnnnmnnnnnmnnnnnnnnnnn View Update Manager Details Update Mow YiewfEdit Configuration Comply with Configuration Acknowledge Alerts Copy Delete Select All Clique no bot o Add Em Address informe http sophosv522 srv01 m3corp com br Em Username informe seu usu rio de atualiza o informado em sua licen a Em Password informe a senha do seu usu rio de atualiza o Clique no bot o OK Source Details x a HTTP http ifsophosyS2e srv0l mscorp com br Browse or Username CLI EM USERNAME Password TITO Change IF updates From the above source are downloaded through a proxy server enter the details here Proxy settings Lise a proxy server Co connect Address Port D Username Password Change ca M3Corp 3 40 3 41 3 42 3 43 3 44 3
3. 45 Clique novamente no bot o Add Em Address informe http sophosv522 srv01 m3corp com br 8089 Em Username informe seu usu rio de atualiza o informado em sua licen a Em Password informe a senha do seu usu rio de atualiza o Clique no bot o OK para salvar a nova Sources Configure update manager WINSR 2003 Mowe Up http iisophosyS22 srv0l macorp com br a089 Move down Reo W eS LOK cee Clique na guia aba Subscriptions selecione o item Recommended clique no bot o gt e ent o clique no bot o OK Configure update manager WINSR 2003 Recommended 3 46 Na janela Configure update manager clique no bot o OK 3 47 Duas mensagens ser o exibidas conforme os exemplos das imagens abaixo clique no bot o Sim e em seguida clique no bot o OK Vv Es Sophos Enterprise Console A It is not possible to determine if the source location http fsophosy522 srv01 m corp com br has a direct network path to Sophos because the location is not managed Would vou like to save the configuration anyway Sophos Enterprise Console a x The update location http sophosv522 sry0 1 macorp com br at the top of your updating hierarchy is not managed It is not possible to verify iF it is up to date Please ensure that the location is up to date 3 48 Clique com o bot o direito no servidor e clique em
4. 9 Recomme Anti virus Linux Please 9 Recomme Anki virus PD one tac as 0 Tose are Ambi iene El Details cocel A 3 52 Clique no bot o OK Sophos Enterprise Console 1 x The update location http fsophosyvS2e srv0l macorp com br at the top of your updating hierarchy is not managed It is nok possible to verify if itis up to date Please ensure that the location is up to date 9 M 3 Net ted m d 3 53 Clique no bot o OK Software Subscription x You have modified the software subscription Recommended which is used by the updating policies and indirectly by the groups listed below Updating policies Groups 3 54 A coluna Download status ir voltar a indicar Downloading binaries o primeiro update onde ser realizado o download dos arquivos de instala o para cada plataforma selecionada anteriormente quando o download finalizar a coluna Download status ir indicar Last checked at lt data gt necess rio aguardar o download finalizar para e Fazer a instala o do Sophos Endpoint nas esta es e Configurar algumas pol ticas como Application Control e Data Contro dependem de algumas informa es que s o coletadas via update que Update managers ter Last updated Download status AWINSRV ZOOS 4Fi2014 11 11 51 Downloading binaries 3 55 Para voltar a visualizar o painel dos endpoints
5. Console 5 2 2 on your computer To continue click Next WARNING This program is protected by copyright laws and international treaties voltar Cancelar 3 5 Clique em I accept the terms in the license agreement e clique no bot o Ml m Avan ar Ml Sophos Enterprise Console 5 2 2 Installer l xX License Agreement Please read the Following license agreement carefully SOPHOS LICENSE AGREEMENT Please read carefully the following legally binding License Agreement between Sophos and Licensee as defined below for the Products defined below By selecting the accept option breaking the seal on the software package or installing copying or otherwise using the Products Licensee acknowledges that Licensee has read understands and agrees to be bound by the f tarmo nf thic Liranco Anraarmont lf lironcoo dnar not anrao snath 1 do not accept the terms in the license agreement Print lt voltar Cancelar 3 6 Verifique se as tr s op es est o selecionadas e clique em Avan ar Mi Sophos Enterprise Console 5 2 2 Installer x Components Selection Select the components vou want to install on this computer Manages Sophos software on networked computers lw Management Server Handles updating and communication For Sophos software on networked computers W Database Stores security status data lt voltar Cancelar 3 7 Caso algum item cr tico
6. Vv O Tamper protection impede que usuarios nao autorizados editem as politicas bem como desinstalar o Sophos Endpoint do computador com isto ser necess rio informar uma senha que foi previamente configurada nas pol ticas da console Policies EE Updating EC Anti virus and HIPS E H Firewall H NAC H Application control E E Data control nar Device control H E Full disk encryption E Tamper protection MO Default E Fatch E Web control 4 3 1 No quadro Policies expanda o item Tamper protection 4 3 2 Clique com o bot o direito na pol tica Default dentro o item Tamper protection e clique em View Edit Policy 4 3 3 Marque a op o Enable tamper protection 4 3 4 Clique no bot o Set 4 3 5 Em Password informe a senha desejada 4 3 6 Em Confirm password confirme a senha e clique no bot o OK 4 3 7 Clique no bot o OK Tamper Protection Policy Default x M Enable tamper protection Create or change the password that allows endpoint users to uninstall disable or re configure Sophos Endpoint Security and Control Password ESEC TTTTToooo M3 4 4 Patch Atualmente 90 dos ataques podem ser evitados com um patch existente No entanto muitos computadores continuam em risco pois identificar os computadores que est o sem um determinado patch pode ser uma tarefa dif cil Al m de identificar os computadores que
7. est o sem algum patch de corre o o Sophos Patch Assessment qualifica os patches e identifica as amea as que exploram a vulnerabilidade que o patch pode corrigir Policies EE Updating EC Anti virus and HIPS H Firewall U M o E Application contral Data control 4 Device control SER Full disk encryption AA Tamper protection E4 Patch lii Default HE Web control 4 4 1 No quadro Policies expanda o item Patch 4 4 2 Clique com o bot o direito na pol tica Default dentro o item Patch e clique em View Edit Policy 4 4 3 Marque a op o Enable patch assessments 4 4 4 Em Assess for missing patches selecione Every day 4 4 5 Clique no bot o OK Patch Policy Default x 455655 For missing patches Every day Once enabled patch assessments occur immediately on computers and then at the interval selected M3 5 Instalando os endpoints deploy Para efetuar a instala o dos endpoints que ser o gerenciados possuimos um artigo que descreve como efetuar essa implanta o em detalhes tanto para sistemas operacionais Windows como para Mac OS X e Linux No caso de sistemas Windows existem diferentes m todos para efetuar a instala o basta escolher aquele que julgar mais apropriado para o seu ambiente Lembre se tamb m de instalar o endpoint em seu servidor pois a instala o da console n o instala o endpoint automaticame
8. installation 3 28 Aguarde a instalacao finalizar M Sophos Enterprise Console 5 2 2 Installer Installing Sophos Enterprise Console The program Features you selected are being installed 3 29 Ap s finalizar a instala o ser solicitado um logoff clique no bot o Concluir o logoff ser realizado em alguns casos pode se solicitado a reinicializa o Al Sophos Enterprise Console 5 2 2 Installer Installation of Sophos Enterprise SOPHOS Console 2 2 is complete Sophos Enterprise Console 5 2 2 has been successfully installed To ensure Sophos Enterprise Console runs correctly you need to log off To log off now click Finish To log off later clear the box below and click Finish voltar Cancelar 3 30 Fa a login no servidor ap s isto o Sophos Enterprise Console ir iniciar automaticamente 3 31 Na tela Download Security Software Wizard clique no bot o Cancelar Download Security Software Wizard ES SOPHOS Welcome to the Download Security Software Wizard This wizard will guide you through the process of downloading and automatically updating the security software you need You will need the username and password supplied to you by Sophos To continue click Next Voltar gt Cancelar 3 32 Natela de confirma o clique em Sim Sophos Enterprise Console XI A Are you sure that you want to cancel this wizard Vv
9. C Documents and Settings Administrador Desktop Browse Create a strong password Use a minimum of amp characters and include all of the Following upper and lower case letters numbers punctuation marks and symbols Password eessssesese Confirm esssssssse NOTE These certificates will be required if the server or database need to be recovered We recommend storing them on either external media e g USB drive or a secure network location lt voltar Cancelar OBS Salve os certificados em um local seguro bem como a senha usada Caso ocorrer algum problema no servidor exemplo o HD do servidor foi corrompido o servidor foi formatado etc ser necess rio deste certificado para restaurar o servidor M3Corp Em casos onde o servidor foi perdido sem este certificado n o ser poss vel recuperar o servidor para voltar a gerenciar o software de criptografia instalado nos computadore bem como realizar m todos de recupera o Os seguintes arquivos de backup s o gerados durante o a instala o company cer company p12 mso cer e mso p12 aa O 2 Pal gt ue dE Ba company plz company cer mso piz mso cer Feedback to Sophos Please read the Following carefully M3Corp 3 27 Natela Ready to Install clique no bot o Install para iniciar a instala o fin Sophos Enterprise Console 5 2 2 Installer Ready to Install The Installer is ready to begin the
10. Sophos Enterprise Console 5 2 2 Guia Manual de instala o do Sophos Enterprise Console 5 2 2 Data do Documento Julho 2014 M3 Conteudo do SONS ESTE MANU all a E E EEA EEE 3 2 Requisitos de Instala o a ses rae ssa ja Ao nTida Ga ds aa ds Sadia sadias ai Saida pci dci add Ei 4 3 Instalando o Sophos Enterprise CONSole cccccccsssccccssececcesececceeceeceesecesseseceseeeceeseeseeeeas 5 4 Configura es FECOMENCACA scccccesseccceesececceseccccenscceceunececsueceeeeeecceseuecetsuneceeseneeeetes 20 AL PACES ANO MiP osesectansnhcenroaseatnenea Nado Dane Usa DU ad darei asa diana doi apatia saia de nas ye 20 OD FCW oe AE E E nesta ccvcen O E AN 23 4 3 Tamper protection siisinapeii piada bictveeereubnciieinvaseioenneess 24 FP CI Rater fe aera O pause oneantece E E 25 5 Instalando os endpoints GAEDIOY xivcccicnscseascatunccaccndcccsessxacshownadenteadviedsnacnddcadshinwacsasnatenieateudets 26 9 M3Cort 1 Sobre este manual Este manual descreve os procedimentos necess rios para realizar a instala o do Sophos Enterprise Console 5 2 2 Com o Sophos Enterprise Console poss vel gerenciar todos os computadores protegidos pelo Sophos Endpoint possibilitando inclusive o gerenciamento de diferentes sistemas operacionais e vers es usando apenas uma interface 2 Requisitos de Instala o 1 1 Requisitos para instalar o Sophos Enterprise Console 9 http www sophos c
11. Update now 3 49 Aguarde a coluna Download status alterar de Downloading binaries para Last checked at lt data atual gt isto pode demorar em torno de 1 a 2 minutos Update managers Computer Last updated Download status ER INSRY Z003 2 47f2014 11 11 51 Downloading binaries 3 50 Clique com o botdo direito do mouse no Recommended e clique em View Edit Subscription Software Subscriptions Add jl Recommended WiewfEdit Subscription Rename Subscription Duplicate Subscription Delete Subscription View Subscription Usage Vv M 3 Ne Ne m d 3 51 A janela Software Subscription ir abrir na coluna Platform selecione as plataformas desejadas onde o servidor do Sophos ir fazer o download dos arquivos de instala o para as plataformas selecionadas clique no bot o OK OBS Caso queira marque a op o Windows XP and above na categoria Encryption Products para usar a criptografia da Sophos Software Subscription Recommended i Ioj x subscription name Recommended License Family Sophos Data Protection Suite Platform version status Features a ata pe ERA Fecommen Y Anti virus Host Intrusion Prevention Encryption Products Windows XP an Recommended Full Disk Encryption Mac C Mac OSX 10 6 9 Recomme Anti virus Managed vShield Li C Solaris SPARC 9 Recomme Anti virus C Solaris Intel
12. account and its password must never change For more information ses KB article 113954 User name wWINSRY2003150phosUpdateMgr Browse Password eme lt Voltar Cancelar M3 3 24 Na tela Manage Encryption caso voc nao queira usar a criptografia do Sophos full disk encryption marque a opcao Do not manage encryption e clique em Avan ar poss vel alterar isto ap s a instala o Pule para o passo 3 26 Ml Sophos Enterprise Console 5 2 2 Installer x Manage Encryption Select whether to manage encryption You can use Enterprise Console to manage new or existing Sophos encryption software on your endpoint computers NOTE IF you do not plan to use Sophos encryption or wank to use a different Sophos tool to manage it select Do not manage encryption Do nok manage encryption lt voltar Cancelar 3 25 Caso voc queira usar a criptografia do Sophos full disk encryption 3 25 1 Selecione a op o Manage encryption e clique no bot o Avan ar 3 25 2 Selecione a op o New instalation e clique no bot o Avan ar 3 25 3 Na tela Back Up Certificates informe a senha SOQph sSDE sem aspas e altere o caminho do backup para um local seguro Clique no bot o Avan ar Mi Sophos Enterprise Console 5 2 2 Installer E x Back Up Certificates Back up the new certificates Location to store the certificate backups
13. ater clear the box below and click Finish Wolbar Concluir Gancelar 3 18 Na tela Communication Setting altere a porta para 8191 e clique no bot o Avan ar M3C Vv Ml Sophos Enterprise Console 5 2 2 Installer x Communication Setting Please select the port to connect to the Management Server Enter the port that the Management Console will use to connect to the Management Server using HTTE For more information see B article 114182 Pork number e g 80 fars lt voltar Cancelar 3 19 Natela Sophos Update Manager Credentials clique no bot o Browse 3 20 Caso o computador esteja em um dom nio no entanto o computador n o o domain controller servidor do Active Directory 3 20 1 Clique no bot o Locais 3 20 2 Selecione o nome do computador onde a instala o est sendo executado 3 20 3 Clique no bot o OK 3 21 Informe o usuario SophosUpdateMgr e clique no bot o OK 3 22 Em Password informe s phe s 3 23 Clique em Avan ar Ff Sophos Enterprise Console 5 2 2 Installer E x Sophos Update Manager Credentials Specify the account details For Sophos Update Manager Sophos Update Manager is the component that downloads and distributes updates on your network Specify an existing user name and password that endpoints will use by default to connect to Sophos Update Manager This should be a low privilege
14. for detectado o item ser sinalizado com o s mbolo itens cr ticos devem ser corrigidos antes de prosseguir com a instala o Em caso de d vida sobre algum item listado verifique o artigo 113945 da Sophos http www sophos com support knowledgebase article 113945 html ff Sophos Enterprise Console 5 2 2 Installer i x System Property Checks Sophos Enterprise Console has checked the properties of your system We recommend at least 2 GB RAM For the best experience Wau are an administrator on this computer Wi The Computer Browser service is running Wi The SYSTEM account can impersonate other accounts Wi The computer name does not exceed 15 characters Wi The computer has only one network adapter Wi The computer does not need to be restarted Wi The operating system can support more than 4000 clients Wsophos Remote Management System is not installed Wl Sophos Enterprise Console 3 x or earlier is not installed For more information see KB article 113945 lt voltar Cancelar 3 8 Na tela Destination Folder clique no bot o Avan ar Ml Sophos Enterprise Console 5 2 2 Installer x Destination Folder Click Next to install to this Folder or click Change to install to a different Folder Install the selected components to Change Space Required 410 19 ME Space Available 15 17 GB lt Voltar Cancelar Vv 3 9 3 10 3 11 3 12 3 13 3 14 3 15
15. k suspicious behavior Buffer Overflows MV Detect buffer overflows Changes only affect newly started processes You should restart the computer to make sure any changes made are applied 4 1 9 Aplique as altera es clicando no bot o OK 4 2 Firewall 9 Policies ces Updating El Anti virus and HIPS BA Firewal Default a e ee Application control EE Data control Bl Device control E G Tamper protection E Fatch H E Web control 4 2 1 No quadro Policies expanda o item Firewall 4 2 2 Clique com o bot o direito na politica Default dentro o item Firewall e clique em View Edit Policy Policies ces Updating e Anti virus and HIPS EH Firewall tL Woo Create Policy af Appl Rename Policy H E Dat Duplicate Policy nE Tam Delete Policy H E Pate HE Wek View Groups Using Policy Reset Policy to Factory Defaults 4 2 3 Na tela Welcome to the firewall policy wizard clique em Avan ar 4 2 4 Na tela Configure firewall escolha a op o Single location e clique em Avan ar 4 2 5 Na tela Operational mode escolha a op o Monitor e clique em Avan ar 4 2 6 Na tela File and printer sharing escolha a op o Allow file and printer sharing e clique em Avan ar 4 2 7 Clique em Concluir para finalizar o assistente M3Cori 4 3 Tamper protection
16. nte Segue o link para nosso artigo SEC M todos de Implanta o do Sophos Endpoint http suporte m3corp com br article AA 00218
17. om en us support knowledgebase 118635 aspx 1 2 Requisitos para instalar o Sophos Endpoint Antivirus nos computadores da rede 1 2 1 Windows http www sophos com en us support knowledgebase 118621 aspx 1 2 2 Linux htto www sophos com en us support knowledgebase 118624 aspx 1 2 3 Mac OS X http www sophos com en us support knowledgebase 118623 aspx 1 2 4 NetApp http www sophos com en us support knowledgebase 118633 aspx 1 2 5 UNIX http www sophos com en us support knowledgebase 118625 aspx 3 Instalando o Sophos Enterprise Console 3 1 Fa a download e execute o arquivo sec 522 sfx exe link para download http downloads m3corp com br sophos10 sec 522 sfx exe 3 2 Clique no bot o Install Fi Sophos Enterprise Console 5 2 2 10 SOPHOS This download contains Sophos Enterprise Console 5 2 2 and Sophos Update Manager 1 5 2 This allows you to deploy and manage Sophos Endpoint Protection across your network for Windows Mac OS x Linux UMTS Vidware vohieloe See the release notes for full system requirements El Em Destination Folder ciisec 527 Browse Installation progress O TE Install Cancel 3 3 Aguarde enquanto os arquivos de instala o s o extra dos 3 4 Clique no bot o Avan ar Al Sophos Enterprise Console 5 2 2 Installer f X Welcome to the Sophos Enterprise SOPHOS Console 5 2 2 Installer The program will install Sophos Enterprise
18. re Sophos Enterprise Console will install Windows Installer 4 5 Windows Installer 4 5 will be installed automatically Windows Installer is needed in order to create a new SOL Server instance For your Sophos database After installation of Windows Installer 4 5 the computer must be restarted before continuing with the Sophos Enterprise Console installation Click Install to begin To review or manage any of your installation settings click Back Click Cancel to exit the Installer lt voltar Cancelar 3 17 Caso o Windows Installer 4 5 foi instalado ser solicitado a reinicializa o do computador clique em Concluir para reiniciar o computador Caso n o queira reiniciar o computador neste momento desmarque a op o Restart now e clique em Concluir Ap s reiniciar volte para o passo 3 4 OBS Ap s reiniciar o computador o instalador ser executado automaticamente caso o mesmo usu rio seja usado no logon Caso seja necess rio executar O instalador manualmente execute o arquivo C sec_522 ServerInstaller Setup exe Ft Sophos Enterprise Console 5 2 2 Installer x Installation of Enterprise Console is SOPHOS ready to resume Windows Installer 4 5 has been successfully installed To continue installing Sophos Enterprise Console 5 2 2 you musk restart the computer The Enterprise Console installer Will start again automatically To restart now click Finish To restart l
19. s to malicious websites on hd Download scanning as on access scanning Scheduled scanning Set up and manage scheduled scans Mame Add Edit Remove Extensions and Exclusions Changes to Exclusions or Extensions settings also affect the Full system scan and default on demand scans on the individual computers Coe 4 M 3 a Ye E re 4 1 4 Na guia aba Scanning marque a op o Suspicious files HIPS para habilitar Vv a analise por arquivos suspeitos On access scan settings x Mac Exclusions Linux UNIX Exclusions Cleanup Scanning Extensions windows Exclusions M Check files on M Read IV Rename IV write m Scan For Adware and PUAs Other scanning options Allow access to drives with infected boot sectors Scan inside archive files not recommended v Scan system memory 4 1 5 Na guia Cleanup marque a op o Automatically clean up item that contain a v rus spyware e selecione as a es que devera ser usadas caso o cleanup n o esteja dispon vel ou caso a op o de cleanup n o esteja marcada como o exemplo da imagem abaixo On access scan settings i q x Scanning Extensions windows Exclusions Mac Exclusions Linus UNIS Exclusions Cleanup Viruses spyware IY Automatically clean up items that contain a virus spyware IF vou do not use automatic cleanup or iF clean
20. up is not possible What do you want to do with the infected File f Deny access only Delete Deny access and move to default location Deny access and move to enter a Full UNC pathi BROWSE Suspicious Files Delete Deny access and move to default location Deny access and move to tenter a Full UNC pathi BROWSE 4 1 6 Clique no botao OK 4 1 7 Em Enable behavior monitoring clique em configure Anti virus and HIPS Policy Default Es Authorization Messaging Sophos Live Protection On access scanning ly Enable on access scanning Configure V Enable behavior monitoring Web protection Block access to malicious websites Download scanning las on access scanning Scheduled scanning Set up and manage scheduled scans add oe Edit vue Remove Extensions and Exclusions Changes to Exclusions or Extensions settings also affect the Full system scan and default on demand scans on the individual computers OK Cancel 4 1 8 Em Buffer Overflows habilite a op o Alert only do not block e clique no bot o OK Configure Behavior Monitoring Malicious and Suspicious Behavior HIPS Specify whether to detect and block program behavior that is known or suspected to be malicious MV Detect malicious behavior MV Detect suspicious behavior V Alert only do not bloc
21. y Na tela Database Details selecione a op o Create a new instance called SOPHOS Clique no bot o Browse Clique no bot o Locais Selecione o nome do computador onde a instala o est sendo executada NOTA Caso o servidor seja um controlador de dom nio selecione o dom nio ao inv s do nome do computador Selecionar este tipo de objeto Usu rio Tipos de objeto Deste local wINSFV2003 Locais Digite o nome do objeto a ser selecionado exemplos Sophoshanagement Werlficar nomes Avan ado Cancelar Z Informe o usu rio SophosManagement e clique no bot o OK Em Password informe S ph s MGR Clique no bot o Avan ar Next Ei Sophos Enterprise Console 5 2 2 Installer i x Database Details Specify the user account For database access Select the SQL Server instance on your local computer to be used by the Sophos database Use an existing instance ie Create a new instance called SOPHOS Specify the user account For database access For more information Article 113954 User name wWIMSEY2003150phosManagement Browse Password SEES Voltar Cancelar 3 16 Caso o Windows Installer 4 5 n o esteja instalado o wizard de instala o ir realizar a instala o do mesmo Neste caso clique no bot o Install Ml Sophos Enterprise Console 5 2 2 Installer x Install Required Softwa
Download Pdf Manuals
Related Search