User manual SOPHOS CONTROL 9 ADVANCED UPGRADE GUIDE 09-2009

[. . . ] Sophos Endpoint Security and Control 9 advanced upgrade guide Describes upgrading to: Sophos Enterprise Console version 4. 0 Sophos NAC version 3. 3 Sophos Endpoint Security and Control version 9. 0 Document date: September 2009 Contents 1 About this guide. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 2 What's new?. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 3 System requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 4 Upgrade overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 5 Prepare for upgrade. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 6 Upgrade NAC Manager and Enterprise Console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 7 Do I need to migrate to Sophos Update Manager manually?. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 8 Migrate to Sophos Update Manager. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 9 Upgrade the security software on endpoint computers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 10 Check existing policies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 11 Transfer device control settings to the new policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 12 Configure new features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 13 Troubleshooting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 14 Appendix: What types of update are available?. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 15 Technical support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46 16 Copyright. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 2 Sophos Endpoint Security and Control 9 advanced upgrade guide 1 About this guide This guide tells you how to upgrade: Sophos NAC Manager from version 3. 1 to version 3. 3. Sophos Anti-Virus and Sophos Client Firewall to Sophos Endpoint Security and Control 9. 0. This guide is for you if some or all of the following statements apply: You have Enterprise Console and NAC Manager components installed on different servers. You have Enterprise Console and EM Library installed on different servers. An error occurred during the upgrade and you need to configure the software manually. If you have all Enterprise Console and NAC Manager components installed on a single server, or on two servers where one is dedicated to Enterprise Console and the other is dedicated to NAC, see the Sophos Endpoint Security and Control quick upgrade guide. [. . . ] Normally you subscribe to "Recommended" to ensure that your software is kept up to date automatically. To learn what other types of update are available, see Appendix: What types of update are available?Important: If you select a fixed version, for example, 9. 1. 2, Sophos recommends that you leave the Automatically upgrade fixed version software when it is no longer supported by Sophos check box selected. Running unsupported software leaves you unprotected against new security threats. The new version will be downloaded according to the update manager's schedule and your endpoint computers will be upgraded next time they check for updates. If you want to download the new version immediately, in the Update managers view, select the update manager that maintains the subscription you have changed, right-click and click Update Now. If you want to upgrade computers immediately, wait until the update manager finishes downloading the software. (In the Update managers view, look in the Download status column next to the update manager. ) In the Endpoints view, select the computers in the computer list or a group of computers in the Groups pane, right-click and click Update Computers Now. 30 Sophos Endpoint Security and Control 9 advanced upgrade guide 9. 2. 2 Create a new software subscription To create a new software subscription: 1. In the Software Subscriptions pane, click the Add button at the top of the pane to create a new subscription. Alternatively, if you want to create a copy of an existing subscription, select the subscription, right-click and click Duplicate Subscription. Type a new name for the subscription and then double-click it to open the Software Subscription dialog box. In the Software Subscription dialog box, edit the name of the subscription, if you wish. Click in the Version field next to Windows 2000 and later and then click again. Select the type of update you want to download for version 9 of Sophos Endpoint Security and Control. Normally, you subscribe to the "Recommended" versions to ensure that your software is kept up to date automatically. To learn what other types of update are available, see Appendix: What types of update are available?Important: If you select a fixed version, for example, 9. 1. 2, Sophos recommends that you leave the Automatically upgrade fixed version software when it is no longer supported by Sophos check box selected. Running unsupported software leaves you unprotected against new security threats. After you have created a new software subscription, configure the update manager to maintain it as described in the following sections. For more information about subscription email alerts, see the topic "Set up subscription alerts" in the "Setting up alerts" section of the Sophos Enterprise Console Help. 9. 3 Add a subscription in the update manager If you created a new subscription for the new software version, configure the update manager to maintain this subscription. In the Update managers view, select the update manager, right-click and click View/Edit Configuration. 31 Sophos Endpoint Security and Control 9 advanced upgrade guide 2. In the Configure update manager dialog box, on the Subscriptions tab, select the software subscription in the list of available subscriptions. [. . . ] The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to endorse or promote products derived from this software without prior written permission. Products derived from this software may not be called "OpenSSL" nor may "OpenSSL" appear in their names without prior written permission of the OpenSSL Project. Redistributions of any form whatsoever must retain the following acknowledgment: "This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www. openssl. org/)" THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT "AS IS" AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 49 Sophos Endpoint Security and Control 9 advanced upgrade guide DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. [. . . ]