Allow Sophos update and central management

Question

We have group of servers who are not allowed on our firewall policy to have internet connectivity. 
 My question is what object/FQDN I need to allow so the sophos agent in those server still receive updates and manageable via sophos central.

PhilippRusch · Answer

Did you think about using a proxy/message cache for this group? You can assign this role to one of your other systems behind your firewall.

IsmailJaweed · Answer

As Phillipp Rusch mentioned, it's best to use an update cache in your environment for the servers that do not connect to internet. Just in case, if you still would like to use firewall, you must allow a few Sophos domains and ports listed in the article below to let your devices take the updates and manage via Sophos Central. https://doc.sophos.com/central/customer/help/en-us/PeopleAndDevices/ProtectDevices/DomainsPorts/index.html

Allow Sophos update and central management

Top Replies