What to allow and disallow from or to the Client Server after deploying Endpoint Protection

Hello Floki Saints,

ports 8192 and 8194 endpoint to server are required for management (ideally port 8194 server to endpoint for "latency-free" management
Updating requires the ports for either SMB or HTTP depending on your policy

Christian

Hi Christian

ahhh so I also need to open 8192. Alright. Thanks a lot!

Regards,

Hello Floki Saints,

yes, the endpoint needs to connect to 8192 in order to obtain the IOR.
BTW - have you considered using the Sophos Deployment Packager utility? If you install from a package you don't have to "open" the endpoint temporarily.

Christian

Hi Christian, 

I haven't looked into Deployment Packager. Will try and test if I can deploy Endpoint protection without messing with our hardened servers.

Thanks a lot ,