Deployment of Sophos on WindowsSolved

Hi @clauss! Thanks for reaching out.

Let me walk you through the steps of deploying Sophos via Hexnode.

Before proceeding, ensure your Windows device is enrolled in Hexnode UEM and that you have a valid Sophos Central account with the required subscription. Additionally, verify that your device’s OS version is supported by referring to Sophos’ documentation on system requirements.

1. Login to your Hexnode UEM console, and navigate to Manage > Devices.
2. Select the required Windows devices, and click on Actions.
3. Under Actions, choose Others > Execute Custom Script and upload the installation script (provided below).
4. In the installation script, replace the placeholder download URL with the actual installer link from Sophos Central portal, which points to the location of the installation package.
   • You can get this by navigating to Devices > Installer > Endpoint in Sophos Central, where you can download either the full Windows installer or specific components.

   Following is the installation script:

   Install SentinelOne on Windows devices

   $temp = "C:\temp\" $SophosInstalled = Test-Path -Path "C:\Program Files\Sophos" $InstallerSource = "https://your-sophos-download-url/SophosSetup.exe” $destination = "$temp\SophosSetup.exe" If ($SophosInstalled){ Write-Host "Sophos is already installed. " Sleep 3 Exit } Else { Write-Host "Beginning the installation" If (Test-Path -Path $temp -PathType Container){ Write-Host "$temp already exists" -ForegroundColor Red } Else { New-Item -Path $temp -ItemType directory } Invoke-WebRequest $InstallerSource -OutFile $destination $WebClient = New-Object System.Net.WebClient $webclient.DownloadFile($InstallerSource, $destination) } Start-Process -FilePath "$temp\SophosSetup.exe" -ArgumentList "--quiet"

   1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

   $temp = "C:\temp\" $SophosInstalled = Test-Path -Path "C:\Program Files\Sophos" $InstallerSource = "https://your-sophos-download-url/SophosSetup.exe” $destination = "$temp\SophosSetup.exe" If ($SophosInstalled){ Write-Host "Sophos is already installed. " Sleep 3 Exit } Else { Write-Host "Beginning the installation" If (Test-Path -Path $temp -PathType Container){ Write-Host "$temp already exists" -ForegroundColor Red } Else { New-Item -Path $temp -ItemType directory } Invoke-WebRequest $InstallerSource -OutFile $destination $WebClient = New-Object System.Net.WebClient $webclient.DownloadFile($InstallerSource, $destination) }   Start-Process -FilePath "$temp\SophosSetup.exe" -ArgumentList "--quiet"

5. Once the script is executed, you can verify the deployment status by navigating to the Action History subtab of the device details page.

Once installed, the device will appear under Devices > Computers and servers in the Sophos Central portal.

Disclaimer:

• The information provided here is vendor-specific and may be subject to change. Please refer to the official Sophos website for more information or technical support.
• Hexnode is not responsible for any issues resulting from the installation or use of third-party software.
• It is strongly recommended to test the deployment script and configuration profile on a limited number of devices before proceeding with bulk deployment to avoid potential issues.

Let us know if you have any other questions!

Regards,
Sienna Carter
Hexnode UEM

@clauss Have you tried this out yet? If so, please let me know how it went. Also, what’s the best approach to troubleshoot if the Sophos installation fails?

Thank you @sienna_carter, it worked perfectly for me!

@boris If the installation fails, check Sophos logs on the device at (C:\ProgramData\Sophos\CloudInstaller\Logs). That should give you some info about what went wrong.