We have group of servers who are not allowed on our firewall policy to have internet connectivity.
My question is what object/FQDN I need to allow so the sophos agent in those server still receive updates and manageable via sophos central.
As Phillipp Rusch mentioned, it's best to use an update cache in your environment for the servers that do not connect to internet. Just in case, if you still would like to use firewall, you must allow a few Sophos domains and ports listed in the article below to let your devices take the updates and manage via Sophos Central.
https://doc.sophos.com/central/customer/help/en-us/PeopleAndDevices/ProtectDevices/DomainsPorts/index.html
Ismail Jaweed Ahmed (Ismail)
Senior Professional Service Engineer
