Sophos Anti-Virus for Windows: configuring Windows XP SP2/SP3 and Windows 2003 SP1 computers before installing Sophos

If you have Windows XP computers with Service Pack 2 or 3 (SP2 or SP3) or Windows 2003 computers with Service Pack 1 (SP1) applied, before installing Sophos Anti-Virus, you must configure the Windows Firewall. The Windows Firewall is installed by default when you apply Windows XP SP2 or SP3, or Windows 2003 SP1.

The changes described here can be performed on individual computers or they can be implemented using Microsoft Group Policy in Active Directory. You only need to apply these procedures to Windows XP computers with Service Pack 2 or 3 (SP2 or SP3) applied or Windows 2003 computers with Service Pack 1 (SP1) applied.

• Configuration for automatic installation
• Manual installation

What to do

Configuration for automatic installation

You must add a program exception to the Windows Firewall, or open some ports in the Windows Firewall, on all Windows XP SP2 or SP3, and Windows 2003 SP1 computers on which you are going to install Sophos Anti-Virus. This allows the Sophos software to communicate through the firewall. In Windows XP you should also disable Simple File Sharing, if it is present:

• If Windows Firewall is currently on, in the Windows Firewall configuration window:
  1. Exclude 'File and printer sharing'.
  2. Select the Exceptions tab.
  3. Do either of the following 
     • Click 'Add Program'|'Browse'.
     • Browse to C:\Program Files\Sophos\Remote Management System\RouterNT.exe and select it (the .exe file extension may not be visible).
     or
     • Click 'Add Port'.
     • Add the following TCP ports
       8192
       8193
       8194
       You can reverse these changes after installation.
  4. Click 'OK' twice to confirm.
  5. In Windows XP, disable Simple File Sharing.
• If Windows Firewall is off, in Windows XP disable Simple File Sharing.

Ensure that you have the correct username and password credentials available for when you use 'Find' to locate computers. (This will be the administrator account initially created by the installation wizard or an account that you created.)

If you have set the Windows Firewall as described here, and cannot see the computer when you use 'Find' in Enterprise Console, check that your computer is visible in 'My Network Places'. (Your computer must be visible in 'My Network Places' for 'Find' to be able to locate it.)

If you cannot see your computer in 'My Network Places', check that 'Enable File and Printer Sharing' is on. If you still cannot see the computer in 'My Network Places', consult your Microsoft Windows documentation.

Manual installation

You can install Sophos Anti-Virus manually from a Central Installation Directory (CID), and the computer will update automatically.
However, if you perform an installation in this way on a Windows XP SP2 or SP3, or Windows 2003 SP1, computer with the Windows Firewall enabled, you will not be able to use Enterprise Console to manage the computer.

• At each computer, log on with local administrator rights.
• Browse to the CID, and double-click 'setup.exe'.

For more information, refer to 'Protect computers that need manual installation' in the Sophos Anti-Virus startup guide.