Hi,
I am trying to set up the Endpoint Security firewall on my client PCs and I have a few questions.
On location detection using DNS. What should the entries be? A local DNS server?
I tried setting up by installing the firewall from the console to a group of PCs and then set it to allow by default and then ran as many applications as possible and using it as normal and left them for a week. I added all applications I recognised and updated or added any extrachecksums.
Once I had done that I changed the rule to Block by default. While people could log in, no one could access sites via internet explorer and the network connection now shows as Unauthenticated rather than internet Access.
A number of applications that want to launch hidden processes (though with the same process name as the application) are these safe to add to the list? For example iexplorer.exe, wscript.exe etc.
I tried a single PC with a standalone install on the firewall set up with interactive and then ran applications and added the rules manually. However once I log off or reboot the PC when I turn it back on the PC hangs on windows boot up (applying computer config) or when logging in it hangs applying group policy settings. The only solution is to leave it for several hours!
Any guidance would be appreciated. I read the rollout kb best methods and the guide for Sophos 10.3 but neither helped.
Thanks!
On location detection using DNS. What should the entries be? A local DNS
server?
I tried setting up by installing the firewall from the console to a group
of PCs and then set it to allow by default and then ran as many
applications as possible and using it as normal and left them for a week.
I added all applications I recognised and updated or added any extra
checksums.
Once I had done that I changed the rule to Block by default. While people
could log in, no one could access sites via internet explorer and the
network connection now shows as Unauthenticated rather than internet Access.
A number of applications that want to launch hidden processes (though with
the same process name as the application) are these safe to add to the
list? For example iexplorer.exe, wscript.exe etc.
I tried a single PC with a standalone install on the firewall set up with
interactive and then ran applications and added the rules manually.
However once I log off or reboot the PC when I turn it back on the PC
hangs on windows boot up (applying computer config) or when logging in it
hangs applying group policy settings. The only solution is to leave it for
several hours!
Any guidance would be appreciated. I read the rollout kb best methods and
the guide for Sophos 10.3 but neither helped.
This thread was automatically locked due to age.
