This article describes how to configure MIME Types for a WebCID (central installation directory) using Windows Server 2008 and IIS (Internet Information Services) 7.0 and 8.0.
Note: If you need to configure MIME types on Windows 2000 or Windows 2003, and IIS version 6, refer to the relevant section in the knowledgebase article Sophos Anti-Virus for Windows: How to create a web CID
Only files with extensions registered in the IIS 7.0/8.0 MIME type list will be served. All extensions must be listed, along with an accepted Content-type. (".txt" and "text/plain" for example). You will receive an HTTP Error 403.3 - Not Found error if the file extension is not allowed.
This is best practice, as all unknown extensions will be blocked by default, and you must explicitly whitelist an extension in order to allow access. (Please see http://learn.iis.net/ for more information).
Known to apply to the following Sophos product(s) and version(s)
Sophos Endpoint Security and Control 9.7
Sophos Endpoint Security and Control 10.0
What To Do
You can either use the list provided here, or generate your own list by running a visual basic script on a Windows computer with security permission to read files in your update location.
Once you have configured IIS, it is recommended you perform a number of update tests as detailed here.
How to generate a list of MIME Types using a VBScript
Note: This script will not work for SAV for Linux/Unix CIDs.
GetMimeTypes.vbs.txt and rename the file to
- At the input box, paste in or type a path to a package update folder (CID) or the parent CIDS directory (This can be a UNC path also).
C:\ProgramData\Sophos\Update Manager\Update Manager\CIDs
Note: The script will scan all sub-directories, if you use the
CIDS directory, it will list all extensions in all packages found below. You can specify one package by changing the end of the path to the following
SAVSCFXP as required.
- A text file called
MIMETypeList.txt will be created in the same directory as the script, this will contain all the discovered file extensions.
Note: Within the
ESCOSX folder are a number of sub-folders that show a file like extension, the script will add these extensions also (These folders appear as files on an OSX computer).
How to configure MIME Types in Internet Information Services (IIS) Manager
- Open Internet Information Services (IIS) Manager. (To do this click Start|Administrative Tools|Internet Information Services (IIS) Manager.)
- Select the Sophos WebCID website you have created. Under the 'Features View' area in the IIS section, double-click on 'MIME Types'. A list of the default accepted MIME Types will appear.
- On the Actions pane, click 'Add... '
- For the File name extension: field, enter the file extension needed. For example
- In the 'MIME type' field, type the Content-type. For example
- Click OK. Your registered MIME type will be displayed.
- Repeat this process for all of the file extensions required. (Any file extensions present in your WebCID but not showing in the 'MIME Types' list must be added.)
- Close Internet Information Services when finished.
MIME Type List
Note: This list is subject to change.
|CID Name |
|SAVSCFXP (Version 10) ||ESOSX (Version 8) ||savlinux |
|See 38238. |
If updating problems occur, see 64787 for troubleshooting information.
After configuring the necessary MIME types within IIS it is recommended that you check that a test client can successfully update from the web server. If there are problems you suspect are related to files not being delivered it is recommended you test downloading the files from the web server using a browser.
You may need to cross reference the log files of AutoUpdate and the IIS web server logs to establish the file or files that cannot be downloaded.
You can test the download of individual files from an internet browser by enabling Directory browsing, details are available here.