FAQ - RWTH Antivirus Protection

After the Sophos licenses expire, the following applies:

• Existing endpoints are no longer updated.
• New endpoints can no longer be protected.
• Policies can no longer be updated.
• Access to the Sophos Central instance and thus to the function for deactivating tamper protection is possible for a maximum of another 30 days.

No, each instance of the virus scanner requires a corresponding cloud management instance via which the virus scanner is configured and monitored

Yes, you can. However, the prerequisite is that these systems can at least establish a network connection to a gateway server. Further information on the use of such a gateway server can be found under general information on operation.

You do not have to apply for a separate Cisco Secure Endpoint management instance for each managed device, but you can. The IT Center does not impose any rules in this regard. If you otherwise manage the infrastructure of several institutions together, it may also make sense to keep all computers in one instance when managing the virus scanner. You can also manage each institution in its own instance and thus achieve a clean separation. However, this naturally results in increased administration work.

The IT Center can open a ticket with Cisco for you. Please send us a description of the problem.

An IPv4 connection is required to update and operate the virus scanner, i.e. IPv6-only systems are currently not supported. Furthermore, only IPv4 address spaces are supported when using IP block/allow lists.

No, Cisco does not offer this option.

XDR (eXtended Detection and Response) is the next license level of Cisco Secure Endpoint, but is not included in the country license agreement.

Cisco Secure Cloud Management is a feature that allows companies to centrally manage the Secure Client (including all plugins, VPN, Secure Endpoint, Umbrella, Duo, etc.). This is also not possible in our infrastructure.

Unfortunately, it is not possible to deactivate the pop-ups in the console.

This message is normal in our system and can be ignored.