This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Management Communication won`t work

Hello,

I am sorry for asking again but I have another problem regarding the communication between Sophos Endpoint and Sophos Central.

In our network we use an user authenticated proxy to connect to the internet.

I created a special user for the connection between the endpoints and Sophos Central. This user authenticates on the proxy without any problems.

These are the setting in Sophos Central:

After configuring the Proxy in Sophos Central I downloaded the windows client and installed it on several devices.

Unfortunately these devices can`t communicate with Sophos Central:

The PCs itself have access to the internal network and to the external internet.

As soon as I connect the PCs to an external network (without proxy) the communication establishes and works without problems.

Are there any errors I made regarding the configuration?

-I inserted our proxy settings with tested credentials into Sophos Central

-After this I downloaded the client software and installed it on our PCs

-The PCs can connect to the internet but the endpoint software seems to ignore the proxy settings

-I also tried this solution but without any effect

Thank you for your help!

This thread was automatically locked due to age.

0 QC over 4 years ago

Hello ,

the McsClient log should have some details why it or what fails now. Apparently the install and registration worked with the correct switches.

Christian
Cancel
Vote Up 0 Vote Down

Cancel
0 Shweta over 4 years ago

Hi Tobias Kittsteiner

MCS Client logs should give little more details about why it is not communicating to Sophos Central. However, can you check this article and follow to configure proxy via command prompt on any one of the endpoints and see if it works out for you.

Shweta

Community Support Engineer | Sophos Technical Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 Tobias Kittsteiner over 4 years ago in reply to QC

Thank you for your answer!

I checked the log and found many of this errors:

[ 3776] INFO [connect] trying server mcs-cloudstation-eu-central-1.prod.hydra.sophos.com/.../ep
[ 3776] INFO [connect: configured proxy] trying proxy prx.COMPANY.de:8080
[ 3776] INFO GET mcs-cloudstation-eu-central-1.prod.hydra.sophos.com:443/.../ep
[ 3776] INFO 407 Proxy Authentication Required: sent=0 rcvd=0 elapsed=25ms
[ 3776] INFO [connect: system proxy] trying proxy http=prx.COMPANY.de:8080

But I set the authentication in the Central?

I even tried several different credentials. But every time I`ve got the same error.
Cancel
Vote Up 0 Vote Down

Cancel
0 Tobias Kittsteiner over 4 years ago in reply to Shweta

Thank you for your suggestion. But the right settings are already set:
Cancel
Vote Up 0 Vote Down

Cancel
0 QC over 4 years ago in reply to Tobias Kittsteiner

Hello Tobias Kittsteiner,

please post a longer section of the log, ideally a complete cycle of the communication attempt.
Normally one can't send the credentials in advance as the server determines what schemes are acceptable. Thus usually a basic connection attempt is made, the server responds with 401/407 and an Authenticate header field and only then the credentials are used. Dunno the details of MCS' workings, whether it logs one or two attempts in this case, 25ms doesn't tell. Obviously it tries the system proxy next - probably with the same result. The rather obvious errors are often red herrings though.

Christian
Cancel
Vote Up 0 Vote Down

Cancel
0 Tobias Kittsteiner over 4 years ago in reply to QC

Here you can find the complete McsClient.log:

8875.McsClient.log

I played a little bit around with our two proxies. But none of them seems to allow the connection.

It seems that the authentication credentials aren`t provided?

But like I mentioned, I inserted them in the Central. Also various other 'online-software' work without this problems.
Cancel
Vote Up 0 Vote Down

Cancel
0 DianneY over 4 years ago in reply to Tobias Kittsteiner

Please see if this also helps: https://community.sophos.com/kb/en-us/119263#Proxy%20endpoint, where it says "Note: If your proxy server requires authentication, do the following:"

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel
0 QC over 4 years ago in reply to Tobias Kittsteiner

Hello Tobias Kittsteiner,

could you solve the problem?
Indeed it looks like the credentials aren't supplied, both proxies return 407. Should have thought of it earlier - don't the proxies have a detailed log of failed connection attempts?

Christian
Cancel
Vote Up 0 Vote Down

Cancel
0 Tobias Kittsteiner over 4 years ago in reply to QC

Hello QC, I am sorry for letting you wait. I told my colleague to add the exceptions in our proxy. But this problem still occure. I can update the endpoint without any problems. But the connection between Sophos Central and the endpoint won't be established.
Cancel
Vote Up 0 Vote Down

Cancel
0 QC over 4 years ago in reply to Tobias Kittsteiner

Hello Tobias Kittsteiner,

no problem.
You say that updating (that AFAIK should use the same proxy) does work?

Christian
Cancel
Vote Up 0 Vote Down

Cancel