Consolidate F-Sercure Manager 11 and Sophos on WSUS

pierinozzo

Hi,

 

We need to consolidate our servers.

 

Is it possible to install an F-Secure Policy Manager Konsol 11.21 

In addition:

Sophos Management Console
5.2.1 Sophos Management-Database
Sophos Management Server 5.2.1
Sophos Update Manager 1.5.4.11

 

on a WSUS-Server?

 

without any problems?

 

 

Thanks in advance

 

etomcat

Hello,

 

Generally not a good idea, in fact a bad idea. If the proposed do-it-all swiss army knife server computer crashed for whatever reason, you lose control and oversight for BOTH security vendors and WSUS. Hackers can then laugh all the way to the bank, after selling the valuable data they have spritied out of your network. (Also known as the don't put all your eggs in one basket method.)

 

On the other hand, consolidation nowadays means VMs in most cases. It should be a better idea to put FSPM and Sophos Enterprise Management in separate VMs and also make sure your virtual hosting infrastructure is truly redundant. Or get another blade.

 

Otherwise, F-Secure Policy Manager Server is heavy on storage space use (both in gigabytes and transactions/sec), especially when virus definition databases are being refreshed. PM console also has some healthy RAM appetite, being Java based. Sophos may or may not be happy about co-existing in such an environment.

 

Furhermore, if you have a problem with the do-it-all server, there could be a battle royale, whereby all three vendors could point fingers at each other being responsible, essentially meaning you have shot yourself in the foot. I'd say let's keep things separated to prevent technical and human conflicts.

 

Best Regards: Tamas Feher, 2F 2000, Hungary.