sophos client making alot of requests to 4.sophosxl.net

Question

I have alot of clients making requests to the following 4.sophosxl.net site using https. 
 these client do not have Internet access. 
 i have disable sophos live protection as advised previously but the requests continues. 
 how do i stop them

QC · Answer

Hello yeowkm , 
 apparently your endpoints could have an internet connection. Normally the recommendations don't differ but as no connection is possible Live Protection can be turned off (which would also take care of these lookups). 
 
 If you observe just connection attempts to 4.sophosxl.net then it is perhaps MTD. 
 
 Christian