Sophos Anti-Virus for Linux and UNIX: Changes to supported platforms


Announced 30 June 2017 – As part of Sophos’ ongoing product lifecycle review process, we plan to update the platforms that are supported by the Sophos Anti-Virus for Linux and UNIX offerings. The changes are designed to enable Sophos to provide the strongest protection for the most popular platforms, and will affect the following:

The following sections are covered:

Applies to the following Sophos products and versions

Central Managed Threat Response [MTR] for Linux


The number of customers requiring Anti-Virus capabilities for legacy UNIX platforms continues to decline. Sophos plans to support the most popular platforms going forward, and plans to retire support for HP-UX.


The latest versions of many popular Linux distributions are now only available for 64-bit platforms. After June 30, 2018, with the exception of Red Hat Enterprise Linux 6, Sophos Anti-Virus for Linux will support 64-bit versions of Linux distributions only.

Update July 1, 2018: In line with previous communications, Sophos Anti-Virus for Linux now supports 64-bit platforms only, with the exception of Red Hat Enterprise 6.


The Sophos Anti-Virus for Linux agent currently includes a large number of pre-compiled Talpa Binary Packs for on-access scanning, many of which are for very old and deprecated kernel versions. Most customers use newer kernels in order to benefit from kernel enhancements and improved security, therefore Sophos plans to reduce the number of pre-compiled Talpa Binary Packs that are provided with the product.

  • When a new kernel version is introduced for a specific Linux distribution, Sophos typically aims to provide a Talpa Binary Pack for the new kernel version within approximately two to four weeks.
  • After June 2018, Talpa Binary Packs for kernel versions that are older than 18 months for that Linux distribution will be removed from the agent download. Update: This change is now scheduled for release October 22, 2018.
  • Talpa Binary Packs for kernel versions that are older than 18 months for that Linux distribution will be removed from the agent download.
  • Sophos will continue to provide Talpa Binary Packs for all kernel versions for supported Red Hat Enterprise Linux 6/7 distributions.

  • A definitive list of kernel versions for which Talpa Binary Packs are provided will continue to be published and updated on a regular basis. See TalpaBinaryPacks.txt for the current list. Note: this list is updated automatically when Talpa Binary Packs are added and removed.
  • Existing Sophos Anti-Virus for Linux installations will not be affected by this change. Talpa on-access scanning will continue to function without interruption and Sophos will continue to support customers using the product.
  • If on-access scanning is required and Sophos does not provide a pre-compiled Talpa Binary Pack for your kernel, the following options are available:

Related:

7023274: UNIX Agent fills disk partition



Complete the following steps to install this hotfix.

NOTE:

This hotfix is not applicable on AIX, HP-UX, SunOS systems.

1. Click Patch > Patch Manager.

2. Click Load Patch to add the p751p102 patch to the list of available patches.

3. Select the computers on which you want to apply the patch.

4. Select the patch.

5. Click Start Install.

6. Click Back to close the Patch Manager.

Related:

7022010: Reflection for Secure IT Supported Platforms

Supported Platforms in Reflection for Secure IT Gateway

Platform
1.1
1.1 SP1
Microsoft Windows Server 2016 on Intel or equivalent, 64-bit
No
Yes
Microsoft Windows Server 2012 R2 on Intel or equivalent, 64-bit
Yes
Yes
Microsoft Windows Server 2012 on Intel or equivalent, 64-bit Yes Yes

Supported Platforms in Reflection for Secure IT Client for Windows

Platform
7.1
7.1 SP2
7.2
7.2 SP3
7.2 SP4
7.2 SP5
8.0
Windows 10 on Intel or equivalent, 64- or 32-bit
No
No
No
No
No
No
Yes
Windows 8.1 on Intel or equivalent, 64- or 32-bit
No
No
No
Yes
Yes
Yes
Yes
Windows 8, on Intel or equivalent, 64- or 32-bit
No
No
No
Yes
Yes
Yes
Yes
Windows 7 on Intel or equivalent, 64- or 32-bit
No
Yes
Yes
Yes
Yes
Yes
Yes
Windows XP SP3 on Intel or equivalent, 64- or 32-bit
Yes
Yes
Yes
Yes
Yes
No
No
Windows XP SP2 on Intel or equivalent, 64- or 32-bit
Yes
Yes
No
No
No
No
No
Windows Vista SP2 on Intel or equivalent, 64- or 32-bit
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Windows Vista SP1 on Intel or equivalent, 64- or 32-bit
Yes
Yes
No
No
No
No
No
Windows Server 2016 on Intel or equivalent, 64-bit
No
No
No
No
No
No
Yes
Windows Server 2012 R2 on Intel or equivalent, 64-bit
No
No
No
No
Yes
Yes
Yes
Windows Server 2012 on Intel or equivalent, 64-bit
No
No
No
Yes*
Yes
Yes
Yes
Windows Server 2008 R2 with Remote Desktop Services on Intel or equivalent, 64-bit
No
Yes
Yes
Yes
Yes
Yes
Yes
Windows Server 2008 with Terminal Services on Intel or equivalent, 64- or 32-bit
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Windows Server 2003 with Terminal Services on Intel or equivalent, 64- or 32-bit
Yes
Yes
Yes
Yes
Yes
No
No
Windows 2000 Professional SP4 on Intel or equivalent, 32-bit
Yes
Yes
No
No
No
No
No
Windows 2000 Server on Intel or equivalent, 32-bit
Yes
Yes
No
No
No
No
No
Citrix XenApp/Presentation Server
Yes
Yes
Yes
Yes
Yes
Yes
Yes
VMWare
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Microsoft Virtual PC
Yes
Yes
Yes
Yes
Yes
Yes
Yes

* Legacy Help not supported on this platform. See also Using Windows Client Help below.

Supported Platforms in Reflection for Secure IT Server for Windows

Platform
7.1
7.2 and 7.2 SP1
8.0
8.1
8.2
8.2 SP1
Microsoft Windows Server 2016 on Intel or equivalent, 64-bit
No
No
No
No
No
Yes
Microsoft Windows Server 2012 R2 on Intel or equivalent, 64-bit
No
No
No
No
Yes
Yes
Microsoft Windows Server 2012 on Intel or equivalent, 64-bit
No
No
No
Yes
Yes
Yes
Microsoft Windows Server 2008 R2 on Intel or equivalent, 64-bit
No
Yes
Yes
Yes
Yes
Yes
Microsoft Windows Server 2008 on Intel or equivalent, 64- or 32-bit
Yes
Yes
Yes
Yes
Yes
No
Microsoft Windows Server 2003 SP2 or higher on Intel or equivalent, 64- or 32-bit
Yes
Yes
Yes
Yes
No
No
Microsoft Windows Server 2003 SP2 on Itanium, 64-bit
Yes
No
No
No
No
No
Microsoft Windows 2000 Server SP4 or higher on Intel or equivalent, 32-bit
Yes
No
No
No
No
No
Microsoft Windows 7 on Intel or equivalent, 64- or 32-bit
No
No
Yes
Yes
Yes
No
Microsoft Windows Vista on Intel or equivalent, 64- or 32-bit
Yes
No
No
No
No
No
Microsoft Windows XP SP2 or higher on Intel or equivalent, 64- or 32-bit
Yes
No
No
No
No
No

Note: The server requires Microsoft XML 6.0 parser. If this parser is not already present on your system, the setup program installs it. Parser installation does not override or replace any other versions of Microsoft XML parser on your system, and this change does not affect software that uses other versions of the parser.

Supported Platforms in Reflection for Secure IT Client and Server for UNIX

8.0.2.138

SP2 HF5

8.0.2.146

SP2 U1
IBM AIX 7.2 on PowerPC
No
No
No
No
No
No
No
No
Yes
Yes
IBM AIX 7.1 on PowerPC
No
No
No
Yes
Yes
Yes
Yes
Yes
Yes
Yes
IBM AIX 6.1 on PowerPC
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
IBM AIX 5.3 on PowerPC
Yes
Yes
Yes
Yes
Yes
No
No
No
No
No
IBM AIX 5.2 on PowerPC
Yes
Yes
Yes
No
No
No
No
No
No
No
HP-UX 11i v3 on Itanium, 64-bit
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
HP-UX 11i v2 on Itanium, 64-bit
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
HP-UX 11i v2 on PA-RISC
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
HP-UX 11i v1 on PA-RISC
Yes
No
Yes
No
No
No
No
No
No
No
Red Hat Enterprise Linux 7 on Intel, 64-bit
No
No
No
No
No
No
Yes
Yes
Yes
Yes
Red Hat Enterprise Linux 6 on Intel, 64-bit
No
No
No
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Red Hat Enterprise Linux 6 on Intel, 32-bit
No
No
No
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Red Hat Enterprise Linux 5 on Intel 64-bit
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Red Hat Enterprise Linux 5 on Intel 32-bit
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Red Hat Enterprise Linux 5 on Itanium, 64-bit
Yes
Yes
Yes
No
No
No
No
No
No
No
Red Hat Enterprise Linux 4 on Intel, 64-bit
Yes
Yes
Yes
No
No
No
No
No
No
No
Red Hat Enterprise Linux 4 on Intel, 32-bit
Yes
Yes
Yes
No
No
No
No
No
No
No
Red Hat Enterprise Linux 4 on Itanium, 64-bit
Yes
Yes
Yes
No
No
No
No
No
No
No
Red Hat Enterprise Linux 4 on IBM System z, 64-bit
Yes
Yes
Yes
No
No
No
No
No
No
No
SUSE Linux Enterprise Server 12 on IBM System z, 64-bit
No
No
No
No
No
No
No
Yes
Yes
Yes
SUSE Linux Enterprise Server 11 on Intel, 64-bit
No
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
SUSE Linux Enterprise Server 11 on Intel, 32-bit
No
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
SUSE Linux Enterprise Server 10 on Intel, 64-bit
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
SUSE Linux Enterprise Server 10 on Intel, 32-bit
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
SUSE Linux Enterprise Server 10 on IBM System z, 64-bit
No
No
No
Yes
Yes
Yes
Yes
Yes
Yes
Yes
SUSE Linux Enterprise Server 9 on Intel, 32-bit
Yes
Yes
Yes
No
No
No
No
No
No
No
SUSE Linux Enterprise Server 9 on Intel, 64-bit
Yes
Yes
Yes
No
No
No
No
No
No
No
SUSE Linux Enterprise Server 9 on Itanium, 64-bit
Yes
Yes
Yes
No
No
No
No
No
No
No
SUSE Linux Enterprise Server 9 on IBM S/390, 32-bit
Yes
Yes
Yes
No
No
No
No
No
No
No
Oracle Solaris 11 on Intel, 64-bit
No
No
No
No
No
No
Yes
Yes
Yes
Yes
Oracle Solaris 11 on SPARC
No
No
No
No
Yes
Yes
Yes
Yes
Yes
Yes
Oracle Solaris 10 on Intel, 32-bit
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Oracle Solaris 10 on Intel, 64-bit
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Oracle Solaris 10 on SPARC V9
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Oracle Solaris 9 on SPARC V9
Yes
Yes
Yes
Yes
Yes
No
No
No
No
No
Oracle Solaris 8 on SPARC V9
Yes
Yes
Yes
No
No
No
No
No
No
No

System Requirements for Reflection for Secure IT Client and Server for UNIX

Reflection for Secure IT Client and Server for UNIX version 7.1 (or higher) require:

Supported Virtualization Products

Reflection for Secure IT is supported on the following virtualization platforms:

Virtualization Product
Reflection for Secure IT Client and Server for UNIX *
Reflection for Secure IT Server for Windows *
Reflection for Secure IT Client for Windows
Reflection for Secure IT Gateway *
Citrix XenApp/Presentation Server


7.1 or higher

VMware vCenter Lab Manager ESX
7.1– 8.0
7.1 – 8.0


VMware Workstation/Player


7.1 or higher

VMware Server (ESX)
7.1 – 8.0
7.1 – 8.0


VMware vSphere Hypervisor (ESXi)
8.0 SP1 or higher
8.1 or higher

1.1 or higher

* This product is supported on the virtualization platform if you can run it as a guest on one of the supported operating systems listed above.

Using Windows Client Help

To view the Windows Client Help Topics on the Web, a web browser is required. You need to enable JavaScript to use navigation, search, and other Help features.

To view the legacy Help on Windows 8.1, Windows 8, Windows 7, Windows Vista, or Windows Server 2008, you must install the Windows Help program (WinHlp32.exe), which is available for download from the Microsoft web site. For more information, see Technical Note 2294. Note: Beginning with Windows Server 2012, WinHlp32.exe is not available, so legacy Help is not supported.

For the 8.0 release, the Windows Client Help Topics are locally installed html files. Product documentation for the 8.0 release can be viewed on all supported platforms.

Related:

Re: Getting time out error for device scan for backup server

Hi Everyone,

I’m getting following error while running a “scan for Devices” for Physical Tape Library from Networker NMC.

“Backup devices detection on networker has timed out.Terminating..”

“Detection process for host networker reports nsrmon terminated due to timeout:Errno 946”

what might be the cause ?

The backup environment details :

Networker Version: NetWorker 8.2.4.11.Build.1471 Power Edition/209

Networker server : HP-UX B.11.31 U ia64

Physical Tape Library: Oracle storageTek SL8500

Related:

Getting time out error for device scan for backup server

Hi Everyone,

I’m getting following error while running a “scan for Devices” for Physical Tape Library from Networker NMC.

“Backup devices detection on networker has timed out.Terminating..”

“Detection process for host networker reports nsrmon terminated due to timeout:Errno 946”

what might be the cause ?

The backup environment details :

Networker Version: NetWorker 8.2.4.11.Build.1471 Power Edition/209

Networker server : HP-UX B.11.31 U ia64

Physical Tape Library: Oracle storageTek SL8500

Related:

Re: Can anyone help me , How to disable smb1.0 in isilon , currently we are running on one FS 8.0.3,If we disable will be there any impact, Kindly help me

Also I’d suggest in addition to what Peter mentioned, do some spot-checks.

Do you have any clients actually using v1 still?

isilon-1# isi statistics client -nall –protocols=smb1

Ops In Out TimeAvg Node Proto Class UserName LocalName RemoteName

—————————————————————–

—————————————————————–

Total: 0

Versions of SMBv1

Keep in mind that Isilon doesn’t even support very early versions of SMBv1, (which used ASCII for setup and teardown), which once in a while can break things during a migration to Isilon:

  • HPUX with built-in CIFS client
  • AIX with built-in CIFS client
  • NT 4.0
  • Scanners or MFPs built on really old Windows Embedded

Since you’re running now without an issue it’s likely that all of your clients are at least beyond that hurdle, so the impact is likely really low.

To be sure:

But maybe write a shell script to run that command once per hour for a week, and append the results to a log file. Then you can go to your change control board (assuming you have one), and say, hey, nobody is using this, and it’s antiquated and slow, I want to turn it off please.

~Chris

Chris Klosterman

Principal SE, Datadobi

chris.klosterman@datadobi.com

Related:

Can anyone help me , How to disable smb1.0 in isilon , currently we are running on one FS 8.0.3,If we disable will be there any impact, Kindly help me

Also I’d suggest in addition to what Peter mentioned, do some spot-checks.

Do you have any clients actually using v1 still?

isilon-1# isi statistics client -nall –protocols=smb1

Ops In Out TimeAvg Node Proto Class UserName LocalName RemoteName

—————————————————————–

—————————————————————–

Total: 0

Versions of SMBv1

Keep in mind that Isilon doesn’t even support very early versions of SMBv1, (which used ASCII for setup and teardown), which once in a while can break things during a migration to Isilon:

  • HPUX with built-in CIFS client
  • AIX with built-in CIFS client
  • NT 4.0
  • Scanners or MFPs built on really old Windows Embedded

Since you’re running now without an issue it’s likely that all of your clients are at least beyond that hurdle, so the impact is likely really low.

To be sure:

But maybe write a shell script to run that command once per hour for a week, and append the results to a log file. Then you can go to your change control board (assuming you have one), and say, hey, nobody is using this, and it’s antiquated and slow, I want to turn it off please.

~Chris

Chris Klosterman

Principal SE, Datadobi

chris.klosterman@datadobi.com

Related:

ViPR discovery of HPUX 11.31 does not discover the host initiators.

Article Number: 496713Article Version: 3Article Type: Break Fix



ViPR Controller 3.5

A new HPUX 11.31 host has been added to ViPR.

The host is discovered but the host FC initiators are not added to ViPR.

ViPR parsing may not handle different initiator formats.

ViPR will only accept initiators in the format /dev/fclp

Put the following command into a script and run it from the HPUX 11.31 host :

for DEVICE in $(/usr/sbin/ioscan -kfnCfc | awk ‘/dev/{print $1}’)

do

echo “host: $DEVICE” ;

/opt/fcms/bin/fcmsutil $DEVICE | grep “World Wide Name” | grep “N_Port”

done;

If the output format is anything other than /dev/fclp, a hot fix is required.

Example of output which is incorrect :

host: /dev/td0

N_Port Node World Wide Name = 0x30000c00001fXXXX

N_Port Port World Wide Name = 0x30000c00001fXXXX

host: /dev/td1

N_Port Node World Wide Name = 0x50060b00002fde55

N_Port Port World Wide Name = 0x50060b00002fde54

Contact customer support and reference this kb(000496713)

Related:

Sophos Anti-Virus for Unix: Work around for savlog –systemlog on HP-UX

This article describes an issue with HP-UX and savlog.

The following sections are covered:

Applies to the following Sophos products and versions

Sophos Anti-Virus for Unix

When running savlog –systemlog on HP-UX this fails with an error message.

Please grep your system log for sav to find SAV related log entries.

If you’ve spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article.

This is invaluable to us to ensure that we continually strive to give our customers the best information possible.

Related:

Informix compatability question

We have a customer with the following configuration:

1. Informix server (running on HP Integrity server, running HP-UX 11i v3 (11.31)
a. IDS 11.50.FC9
b. IDS 11.5 FC8
2. Informix Client 7.31 running on a PA-RISC Container running HP-UX 11i (11.11)
a. CSDK : 2.60.HC1
b. ESQLCOBOL : 7.25.HC2
c. SQL RUNTIME 7.31

The customer would like to upgrade their IDS servers to either 11.7 or 12.2

In addition they would like to upgrade their PA-RISC container client development environment to 3.70.HC8. Is this possible?

Is an IDS 12.1 server running on Integrity talking to an Informix Client in a PA-RISC container a supported configuration?

Any help or direction would be much appreciated… Thanks!

Related: