The first way (downloading a standalone installer from Sophos.com) may seem simpler, but it places more of a burden on your users to understand the settings and know how to apply them. The second way (creating an installation package yourself that includes policies that you set up) may seem like more.

Posted by, Last modified by Adam Zilliax on 12 March 2015 09:06 PM Overview This document will detail the recommended practice for configuring a 3rd party antivirus solution to update properly when Deep Freeze is protecting a workstation. Introduction Deep Freeze provides administrators with a way to protect workstations from changes by rolling back any change made to the computer at reboot. Deep Freeze does not make any distinction between changes that are malicious, or changes that are desired on a workstation and this can pose some challenges in managing 3rd party products that require updates to occur on a periodic basis. The most common interaction that we find on customers workstations is between antivirus software and Deep Freeze. Antivirus software by design requires periodic updates to maintain it’s effectiveness on a client workstation, and problems may arise unless steps are taken to ensure that the antivirus software can perform updates in a timely manner.

Scheduled are used to configure the antivirus software to update in a timeframe where Deep Freeze will not be protecting the workstations. This has the advantage of being one of the less difficult methods to configure but does require that the workstations have a period of time where they will not be used and can be configured to update automatically. Configuring Sophos Endpoint Security clients to update with Deep Freeze Sophos Endpoint Security supports the use of a command line function that can be used to trigger antivirus updates when the workstations enter into maintenance mode. To configure Deep Freeze to trigger Sophos definitions to update when maintenance mode starts follow the process below. Instructions on triggering a Sophos update on a client workstation can be found here; Deep Freeze 7.5 or Higher 1.

Open the Deep Freeze Configuration Administrator. Configure your Deep Freeze install package as per your normal requirements, including passwords and other settings that may be required.

Click on the Workstation Tasks tab. Select Batch File in the Task Type drop down and click Add.

Name the event “Sophos Antivirus” in the Name field. Select the frequency for the updates to occur in the Day drop down and set the start and end time for the event. Coreldraw Essentials X6 (Electronic Download). The options “Allow User to Cancel Event”, “Shutdown after Maintenance”, and “Disable Keyboard and Mouse” can be enabled if desired.

Click on the Batch File tab. Enter the commands to update Sophos in the Batch File Contents field on the tab: 10.