Help with server migration to Sophos Central

Hi All,

I’m looking into migrating our server estate from Sophos enterprise console into Sophos Central.

I have setup the Sophos central migration tool and have attempted the migration of a test server into Central.

When trying to migrate the server sits in a pending state before it times out.

Wanted some advice on the following:

• What ports will need to be opened for the servers to talk to Sophos central and migrate. To make the firewall rule secure, is there a list of IPs and URLs that are associated with Sophos Central so the servers can only communicate to these IPs etc.

• If we setup a message relay and update cache server in Sophos Central can we avoid opening the servers that are still on Enterprise console to the internet I.e. the servers get migrated by communicating through the relay server. This is because majority of our servers do not have any internet connection. Is there further config required to make this possible (If possible)

• If the above is not possible and we open up the ports on our firewall for the servers to migrate. Once all the servers have been migrated can we close the firewall rules and let servers only communicate via the relay server.

• I have read that once a server/endpoint is set to migrate it can stay in pending state for 2 hours before it times out (if there is an issue). Is there a way to shortened the time a migrating state stays in pending.

Thank You.

Mo