Installation

Management software

Install Sophos Enterprise Console on one server (to be used to manage the network) or install the databases on a separate server if you have a large network. For more information on installing the Sophos Enterprise Console database on a SQL cluster, see knowledge base article 116465.

If you use Active Directory, use it to import containers (OUs) first. Then, once you’ve adjusted your groups and created the subgroups that you need, synchronize with Active Directory to import the computers.

If your network has more than 10,000 computers (4,000 if you use Windows Server 2008), you should set up at least one message relay to reduce the load of communications to and from the management server. See knowledge base article 14635.

Client software

You have many options for deploying Sophos Endpoint Security and Control to your client computers:

• Deploy directly from Sophos Enterprise Console, as described in the Sophos Enterprise Console quick startup guide (for smaller networks) or the Sophos Enterprise Console advanced startup guide (for larger networks).
• Use SMS/SCCM (Microsoft recommends that you use SCCM to distribute software when you have 250 or more client computers in your network). For detailed instructions, see knowledge base article 12457.
• Create a script to invoke special features when running the installation with setup.exe. You can then use a Group Policy Object to deploy the script and installation file.