Sophos has completed a change over to a new CDN supplier in order to increase the reliability of our content delivery systems. This migration completed for all addresses below on the 2nd May 2018. This notification is not detailing all the reasons for changing our supplier.
This migration process has several key objectives and deliverables:
This migration will complete a like-for-like migration of the following sites:
The CDN migration will affect the distribution side of our products. The following table details the sites affected, the sites function and what uses the functionality:
d1.sophosupd.com d1.sophosupd.net (alias)
d2.sophosupd.com d2.sophosupd.net (alias)
d3.sophosupd.com d3.sophosupd.net (alias)
dci.sophosupd.com dci.sophosupd.net (alias)
All these changes should be invisible to customers however, if customers have configured their firewall to allow specific IP Ranges, this configuration should then be removed.
These customer will be affected. Exemptions for the following are required.
However, any customer who currently has to exempt by IP address will find they may have to exempt new IP ranges. Wildcards can also be used for the exemptions: *.sophosupd.com and *.sophosupd.net.
Sophos does not recommend whitelisting CDN IP addresses as the range of IP addresses that are presented on the URLs is subject to change. With the previous CDN, there was a set range of addresses that customers could exclude. However, with the new CDN supplier, customers will need to identify IP addresses to then exempt.
An easy way to identify the addresses that need to be excluded is to ping our update servers, as noted in the table above, and exclude the responding host IP addresses.
For further information please see Sophos Update Manager: Timeout while attempting to connect to the specified address. There may be a problem with the network.
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable for us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.