New features

• Enterprise Console can now manage Sophos Exploit Prevention. This lets you:
  • Protect document files from ransomware (CryptoGuard).
  • Protect critical functions in web browsers (Safe Browsing).
  • Mitigate exploits. This protects the applications most vulnerable to exploitation by malware, such as Java applications.
  • Protect against process hollowing attacks.
  • Protect against loading .DLL files from untrusted folders.
• Enterprise Console now supports Windows Server 2016.

Updated components

Sophos Enterprise Console 5.5.

Resolved issues

Issues fixed since release 5.4.1 include:

• ONPREM-1782: In some languages, links to further information were missing in the Computer Details dialog.
• ONPREM-1545: There was an issue with the use of variables for exclusions. We've fixed this and also updated the console so that you can configure the enhanced exclusions now supported by endpoints.
• ONPREM-35: WKI98254: Enterprise Console was incorrectly reporting the purge of old Web Control events.
• ONPREM-419: Enterprise Console was sending out email alerts about the number of out-of-date clients although the critical threshold had not been reached.
• ONPREM-536 [MS15-074]: A Microsoft security patch was causing Enterprise Console installation to fail during registration of the Sophos Client Firewall DLL.

Supported operating systems and SQL Server versions

For operating system requirements and supported SQL Server versions, see http://www.sophos.com/en-us/support/knowledgebase/113278.aspx.

Other software requirements

The installer also attempts to install the following software:

• Microsoft .NET Framework 4.5.2 (unless version 4.x is already installed)
• Microsoft Message Queuing (MSMQ) (unless already installed)

You will need to have the following software installed:

• At least Internet Explorer 7 or later

For more information about installing required system software, refer to the Enterprise Console startup documentation published at http://www.sophos.com/en-us/support/documentation/enterprise-console.aspx.

Port requirements

Enterprise Console requires certain ports to be open. For more information, go to http://www.sophos.com/en-us/support/knowledgebase/38385.aspx.

Hardware requirements

For hardware requirements, see https://www.sophos.com/en-us/support/knowledgebase/118635.aspx.

You can upgrade to Enterprise Console 5.5 directly from the versions listed below.

• Enterprise Console 5.4.1
• Enterprise Console 5.4.0
• Enterprise Console 5.3.1
• Enterprise Console 5.3.0
• Enterprise Console 5.2.2
• Enterprise Console 5.2.1 R2
• Enterprise Console 5.2.1
• Enterprise Console 5.2.0
• Enterprise Console 5.1
• Enterprise Console 5.0

If you are using Sophos Control Center 4.0.1 or 4.1, you will need to upgrade in two steps by following one of the supported upgrade paths:

• Upgrade to Enterprise Console 5.1 and then upgrade to Enterprise Console 5.5.
• Upgrade to Enterprise Console 5.2.2 and then upgrade to Enterprise Console 5.5.

See also knowledgebase article 119105 for more information about different upgrade paths.

The installers for earlier versions of Enterprise Console are available from the Sophos Enterprise Console Downloads page (http://www.sophos.com/en-us/support/downloads/console/sophos-enterprise-console.aspx).

Installation

Upgrading

• If you upgrade to Enterprise Console 5.5 from 5.4 or earlier, there may be problems connecting with endpoints that have older versions of the Sophos Remote Management System (RMS). This is because Enterprise Console 5.4.1 and later enforces TLS (Transport Layer Security) protocol, which can be incompatible with RMS 3 and RMS for Linux or vShield. See knowledgebase article 124873.
• (WKI79868) When you upgrade from Sophos Enterprise Console 5.0 to Sophos Enterprise Console 5.4.x or later, the Patch Assessment Event Viewer will be blank. Missing patches data will appear in the Patch Assessment Event Viewer after the computers are assessed for missing patches during their next scheduled assessment. (The patch assessment interval is specified in the Patch Policy and can be set to "Every 8 hours", "Every day" (default), or "Every week".)

  This issue does not appear when upgrading to Enterprise Console 5.4.x or later from Enterprise Console 5.1 or later.

For more information about issues with upgrading Enterprise Console, see http://www.sophos.com/en-us/support/knowledgebase/114627.aspx.

Deployment

• (DEF84838) It is not possible to protect Windows 8 and Windows 8.1 computers that are in a workgroup from Enterprise Console 5.4.x or later running on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2.

  For more information and instructions on how to enable deployment, see http://www.sophos.com/en-us/support/knowledgebase/118354.aspx.

General

• (DEF90191) On Japanese or Chinese Windows Server 2012 installations, Enterprise Console fails when the Chart tab is selected in the Reporting window. Workaround: Use scheduled reports instead.
• (DEF82914) Optional user-defined desktop messages are not displayed on computers running Windows 8. For more information, see http://www.sophos.com/en-us/support/knowledgebase/118233.aspx.
• (DEF58871, DEF58872) When discovering computers or synchronizing to Active Directory, Enterprise Console may fail to differentiate between multiple computers with the same name, and may switch them between groups alternately. This situation may arise where identically-named computers are situated on different domains or sub-domains.

  To work around this problem, do one of the following.

  • Ensure that Sophos RMS (Remote Management System) is installed and running on all identically-named computers before attempting to find them from Enterprise Console.

    Do not synchronize any Active Directory groups that contain machines which have identically-named computers. Manage the computers manually.

  • Eliminate duplicate computer names on your network.

Data control

For information about limitations of data control, see http://www.sophos.com/en-us/support/knowledgebase/63016.aspx.

Copyright © 2017 Sophos Limited. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.

Sophos, Sophos Anti-Virus and SafeGuard are registered trademarks of Sophos Limited, Sophos Group and Utimaco Safeware AG, as applicable. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.