Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 6 replies
  • Subscribers 17 subscribers
  • Views 14716 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Need website URL used by Sophos Cloud because client check ins are blocked

daveroo

We have a client with a highly locked down site. Their Sophos client workstations cannot check into the Sophos Cloud console.because the default configuration restricts which websites computers can access. I need to create firewall rules to allow workstations to contact the specific URL used to communicate with Sophos Cloud. I've had no luck getting this information from Sophos' support site or knowledge base.  As a result, my cloud console shows all these workstations have never checked in or contacted the cloud console.



This thread was automatically locked due to age.
Parents
  • +1

    Hi ,

    The Sophos cloud client is only use generic web ports for it's management traffic. It would be https almost always. 

    Since the services are hosted in the cloud, an endpoint could connect to different servers. The specific URL would be dependent on the server your endpoint registered with initially. 

    That said here are two ways in which you could determine the actual URL:

    -MCS Endpoint logs, see this KB for details on finding them. In the McsClient log you would see http GET connection attempts that will give you the url. i.e. "GET dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443"

    -Your firewall logs

    Let us know how this goes

    Cheers,

    Voicu.

Reply
  • +1

    Hi ,

    The Sophos cloud client is only use generic web ports for it's management traffic. It would be https almost always. 

    Since the services are hosted in the cloud, an endpoint could connect to different servers. The specific URL would be dependent on the server your endpoint registered with initially. 

    That said here are two ways in which you could determine the actual URL:

    -MCS Endpoint logs, see this KB for details on finding them. In the McsClient log you would see http GET connection attempts that will give you the url. i.e. "GET dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com:443"

    -Your firewall logs

    Let us know how this goes

    Cheers,

    Voicu.

Children
No Data
Unfiltered HTML