Showing posts with label sophos. Show all posts
Showing posts with label sophos. Show all posts

Thursday, August 18, 2016

Sophos Antivirus for Linux

Sophos Antivirus for Linux


Depending on your needs and paranoia, you may want to install an antivirus client on Linux.  Sophos has a nice client but their installation documentation was a bit sparse.  Here are some helper notes for RHEL 6.5:

  1. Upload the sav-linux-##-i386.tgz file to your Linux server
  2. cd /tmp
  3. tar -xzvf /PATH/TO/YOUR/sav-linux-##-i386.tgz
  4. sudo yum -y install /lib/ld-linux.so.2 gcc make kernel-devel-`uname -r`
  5. sudo sophos-av/install.sh
  6. sudo /opt/sophos-av/bin/savupdate
  7. sudo /opt/sophos-av/bin/savconfig set EnableOnStart true
  8. sudo /opt/sophos-av/bin/savconfig set AutomaticAction disinfect
  9. sudo /opt/sophos-av/bin/savconfig add AutomaticAction delete
  10. sudo /opt/sophos-av/bin/savdctl enable
  11. Test to make sure it is working by running this command: curl -o /tmp/eicar.com.txt http://www.eicar.org/download/eicar.com.txt ; cat /tmp/eicar.com.txt   (you should get a warning stating Threat "EICAR-AV-Test" detected in file -- hit enter to acknowledge)

Note: if you use your own update source and have a secondary URL:
a. sudo /opt/sophos-av/bin/savsetup
b. Choose option 1  (Auto-updating configuration)
c. Choose option 5  (Configure secondary update source From own server)
d. When prompted, enter the URL
e. Choose option q  (Quit)

_________

Resources:

  • http://www.sophos.com/en-us/medialibrary/PDFs/documentation/savl_9_cgeng.pdf



Go to link download

Read more »