Setting up a webCID to update Endpoint Security and Control (Sophos Anti-Virus)

A webCID is a Central Installation Directory (CID) for Endpoint Security and Console (Sophos Anti-Virus) that is hosted on an internet server for use over the internet, or on an intranet.

• It is a useful way for computers (e.g. laptops) to update their anti-virus software according to your customized configuration when they are out of the office.
• It consumes less bandwidth than setting all computers to update from the Sophos website.

What to do

Where possible, you should set up your own webCID. This will enable you to configure your anti-virus software as you wish.

1. Install Enterprise Console on your server. Set up groups, Sophos Anti-Virus policy and updating policy to your requirements. See the Endpoint Security and Control Startup Guide for details.
2. Then publish the CID on your website as a webCID.

Sophos AutoUpdate supports the following HTTP authentication types:

• Basic
• NTLM (v1 and v2)
• Digest

Sophos recommends that you use the most secure option available (NTLM v2 or Digest) when configuring your company's website for Sophos updating.

If you cannot set up your own webCID, or as a backup, you can also update your computers directly from the Sophos website.

• On Enterprise Console click 'Updating policy'.
• Select the computer type, and click 'Configure'.
• In 'Setup updating policy for...' select the 'Secondary server' tab.
• Select 'Specify secondary server details'.
• Select 'Sophos' from the dropdown 'Address:' list.
• Click 'OK', then click 'Close'.

For off-site (unmanaged) computers, you can use 'ExportConfig' and 'ConfigCID' as described in section 5 of the Large networks configuration guide, 'Protect computers without using the Enterprise Console'.