Need website URL used by Sophos Cloud because client check ins are blocked

Question

We have a client with a highly locked down site. Their Sophos client workstations cannot check into the Sophos Cloud console.because the default configuration restricts which websites computers can access. I need to create firewall rules to allow workstations to contact the specific URL used to communicate with Sophos Cloud. I've had no luck getting this information from Sophos' support site or knowledge base. As a result, my cloud console shows all these workstations have never checked in or contacted the cloud console.

This thread was automatically locked due to age.

VoicuChirtes · Accepted Answer

Hi daveroo , 
 
 The Sophos cloud client is only use generic web ports for it's management traffic. It would be https almost always. 
 Since the services are hosted in the cloud, an endpoint could connect to different servers. The specific URL would be dependent on the server your endpoint registered with initially. 
 That said here are two ways in which you could determine the actual URL: 
 -MCS Endpoint logs, see this KB for details on finding them. In the McsClient log you would see http GET connection attempts that will give you the url. i.e. "GET dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443" 
 -Your firewall logs 
 
 Let us know how this goes 
 Cheers, 
 Voicu.

VoicuChirtes · Answer

Hi Kurt, 
 
 I believe initial poster was looking for the specific URL used for communication on his machines. 
 We do have a list of domains and ports required for communication and management in the KB below 
 http://sophos.com/kb/121936 
 I hope this answers your question. 
 
 Good day 
 Voicu.