This article provides a possible solution to prevent Security Director Cloud from deleting the anti-virus sophos-engine when it is link to the SSL profile.

When a user implements Sophos Antivirus (AV) on an SRX device from SD-Cloud, it is necessary to associate an SSL profile. Otherwise, the SRX reports that the Sophos AV engine is not running. 

However, SD-Cloud may detect this configuration as a conflict due to a platform limitation and attempt to remove the Sophos AV engine configuration.

Currently, this particular set of CLI is not supported in SDC.

To prevent SD-Cloud from deleting the Sophos AV configuration, it is recommended to apply the SSL profile under a configuration group in the SRX CLI.

Standard Configuration (Not Recommended):

set security utm default-configuration anti-virus sophos-engine server ssl-profile SSL-PROFILE

Recommended Configuration (Using Configuration Groups):

set groups UTM_AV_CONFIG security utm default-configuration anti-virus sophos-engine server ssl-profile SSL-PROFILE

set apply-groups UTM_AV_CONFIG

commit

Apply above changes to make the Sophos AV engine running in SRX.