Sophos Central Endpoint and SEC: Computers fail/hang on boot after the Microsoft Windows April 9, 2019 update. Please follow knowledge base article 133945
Learn about the Benefits of Multi-Factor Authentication (MFA). Turn your MFA on now!
We'd love to hear about it! Click here to go to the product suggestion community
I'm new to Sophos, have being reading docs, but am still missing something(s).
In our installation, we have to request access through our firewalls.
That requires an IP address and Port #. Port # seem not to be a problem.
What are the IP address supposed to be for the required URLs as per KB111428.
I am able to query our corporate DNS servers to get addresses associated with these links.
Is this the approved method?
I've also been told by support that the IP address are subject the change and that we are advised to verify these once in a while.
That poses a bit of an issue for us as modifying a Firewall request is time consuming and if it happens often enough, security may complain.
Surely I'm missing something here.
Thanks for any guidance.
you are using the on-premise, SEC-managed SESC and not Sophos Central? Please note that only the Update Manager (SUM) on the management server requires access to these sites.
if it happens often enoughQuite a number of services and sites uses CDNs so this is not a Sophos-specific scenario. CDNs normally rely on DNS to present the "nearest" server(s) for a given URL. Nearest depends not (only) on your geo-location but (also) on your ISP - something neither the CDN and even less the service-provider can know or control. Nevertheless server/service addresses aren't changed just for the fun of it thus even if you can't allow connections by name/URL it won't happen often or, in case there's a single address, without sufficient "overlap" of the old and new address.