Overview This document will detail the recommended practice for configuring a 3rd party antivirus solution to update properly when Deep Freeze is protecting a workstation. Introduction Deep Freeze provides administrators with a way to protect workstations from changes by rolling back any change made to the computer at reboot. Select Maintenance in the Event Type drop down dialog and click Add. Name the event “Sophos Antivirus” in the Event Name field. Select the frequency for the updates to occur in the Day drop down and set the start and end time for the event. This has the advantage of being one of the less difficult methods to configure but does require that the workstations have a period of time where they will not be used and can be configured to update automatically. Select Batch File in the Task Type drop down and click Add. Name the event “Sophos Antivirus” in the Name field. Select the frequency for the updates to occur in the Day drop down and set the start and end time for the event. The options “Allow User to Cancel Event”, “Shutdown after Maintenance”, and “Disable Keyboard and Mouse” can be enabled if desired. Configuring Sophos Endpoint Security clients to update with Deep Freeze Sophos Endpoint Security supports the use of a command line function that can be used to trigger antivirus updates when the workstations enter into maintenance mode. Once you're on the latest service pack for your version of Windows, ensure that all Microsoft Windows critical updates have been installed.We recommend that you set your computer to automatically install Microsoft updates. You may need to reboot after installing these updates. All PCs must have their existing anti-virus software removed prior to installing Sophos Anti-Virus.(The application needs to be run as an application on each client Mac to do the actual installation.) This stupid design is like the equally stupid approach taken by Adobe and Flash.
Instructions on triggering a Sophos update on a client workstation can be found here; https:// Freeze 7.5 or Higher 1.
If you want to use the Juniper Networks preconfigured profile, use the profile named junos-sophos-av-defaults in your UTM policy.
See Example: Configuring Sophos Antivirus UTM Policies.
SAV8 is being discontinued in April 2014 and does not officially support Mavericks.
It is therefore urgent to move all Macs to SAV9 by April 2014.