Constant connections from SafeGuard to Singapore

Question

We recently looked at a Geofencing report of our network and found a huge number (millions) of attempted connections from our workstations to a Singapore address of 168.63.242.221. 
 On tracking one of the computers down and running a Netstat on it, we found the process is SGTelemetryWinServiceN.exe 
 Is this behavior normal? If yes, are there any other addresses or domains we need to ensure are reachable across the firewall? 
 
 Thanks 
 Jason

Haridoss Sreenivasan · Accepted Answer

Hi Jason, 
 The Telemetry data collection/traffic is a normal behavior. Sophos is committed to making SafeGuard Enterprise the best encryption product in IT security. To achieve this, we need to collect and analyze relevant information from real-world installations. This information cannot be obtained by performing tests or predicting customer usage, but rather from monitoring how you, our valued customers, are actually using our product. Please refer to the article SafeGuard Enterprise 8: FAQs on telemetry data collection . Let me know if this helps resolve your query.