Skip to content

Server Protection

You install a Server Protection agent on servers to protect them against malware, risky file types and websites, and malicious network traffic.

To protect a server, download the installer for your operating system and run it on the server.

For help with setting up your firewall or proxy to communicate between Sophos Central Admin and your managed servers, see Domains and ports to allow.

Download and run the Windows installer

  1. Go to Protect Devices.
  2. Click Download Windows Server Installer.
  3. Go to the Downloads folder and run the installer.

Download and run the Linux Server installer

To download and run the installer do as follows:

  1. Go to Protect Devices.
  2. Click Download Linux Server Installer.

    Alternatively, to download the installer from a command line or script, do as follows:

    1. Right-click the installer link and copy the link address.
    2. On the Linux server, at a command prompt or in a script, use wget with the link address:

      wget Linux installer link

    3. Move the installer to the Downloads directory.

  3. Run the installer as follows:

    1. Change to the Downloads directory.
    2. Change the file permissions to include “execute”:

      chmod +x SophosSetup.sh

    3. Run the installer:

      ./SophosSetup.sh

      If you are not signed in as root, run the installer with the sudo command:

      sudo ./SophosSetup.sh

See Sophos Protection for Linux.

To uninstall Sophos Linux Protection, do as follows:

  1. Go to opt/sophos-spl/bin.
  2. Run the uninstaller:

    ./uninstall.sh

Download and run the Anti-Virus for Linux installer

The Anti-Virus for Linux installer provides anti-virus protection. It doesn't provide the more advanced features of Linux XDR or Linux MTR. It's a legacy product. We recommend that you migrate your Linux servers and use the new Linux Server installer.

  1. Go to Protect Devices.
  2. Find Sophos Anti-Virus for Linux (Legacy).
  3. To download the installer from your browser, click Download Anti-Virus for Linux Installer.

    Alternatively, to download the installer from a command line or script, do as follows:

    1. Right-click Download Anti-Virus for Linux Installer and copy the link address.
    2. On the Linux server, at a command prompt or in a script, use wget with the link address:

      wget Linux installer link

    3. Move the installer to the Downloads directory.

  4. Run the installer.

    1. Change to the Downloads directory.
    2. Change the file permissions to include “execute”:

      chmod +x SophosInstall.sh

    3. Run the installer:

      ./SophosInstall.sh

      If you are not signed in as root, run the installer with the sudo command:

      sudo ./SophosInstall.sh

To uninstall Sophos Anti-Virus for Linux, do as follows:

  1. Go to opt/sophos-av.
  2. Run the uninstaller:

    ./uninstall.sh

Migrate your Linux servers

Sophos Anti-Virus for Linux is not supported after 20 July 2023. We recommend that you migrate your Linux servers to Sophos Linux Protection.

This video explains how to migrate your servers.

To migrate servers, do as follows:

  1. Uninstall Sophos Anti-Virus for Linux.
  2. In Sophos Central, go to Protect Devices.
  3. Click Download Linux Server Installer.
  4. Change the permissions to make the installer an executable.
  5. Run the installer.
  6. When installation is complete, go to Sophos Central, go to Server Protection > Servers and check that the server is protected.

    You see two entries for your server. Delete the entry that has "Sophos Anti-Virus for Linux" in the Protection column.

What happens when you protect a server

When you protect a server:

  • The server is added to the Servers list in Sophos Central.
  • Default policies are applied to the server.