Skip to content


You can install Sophos Endpoint Protection on Windows computers (or servers) and Macs for any of your sub-estates.

API-based deployment


The installation script method will be maintained for backward compatibility. We recommend you use the API-based deployment method instead. See Endpoint API GET /downloads.

We also recommend that you convert existing script-based deployments to the API method.

You must run the installer to protect new computers if you use API-based deployment. You can either run the installer locally or use automated software deployment tools such as System Center Configuration Manager (SCCM) to run the installer on large numbers of computers.

For more help with the installer, see the following topics:

Installation script

Download an installer and create an installation script for each sub-estate. To do this, do as follows:

  1. Go to Deployment.
  2. Download the installer for the operating system you want to protect.
  3. Download the CSV file. You’ll use this to specify the products to install and other details needed for this sub-estate.
  4. Use the installer and CSV file to create your installation script.

    The CSV file includes only sub-estates that have a valid endpoint product license.

  5. Use the script.


You must use the CSV file. The installer won’t work without it.