Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 13 subscribers
  • Views 3829 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HTTPS updates

john_kenny

When will existing customers start using https updates? im sure my updates have been intercepted.  Would https help mitigate this?



This thread was automatically locked due to age.
Parents
  • 0

    The files are all check-summed and signed so even if HTTP is used, the endpoint wouldn't deploy anything not expected. None of the files pulled over the updating channel are unique to you they are just the standard files of the install sets.

    https://community.sophos.com/kb/en-us/127537 should answer at least part of the question.

    The biggest issue I've seen with HTTP is third party proxies/devices blocking Sophos files as suspicious as they are downloaded by AutoUpdate. As less of those will be doing SSL inspection, there should be less false positives from third party vendors breaking updating.

    At the client, evidence of AutoUpdate using HTTPS for updates is the flag "UseHttps = 1" in the file C:\ProgramData\Sophos\AutoUpdate\Config\iconn.cfg

    Regards,

    Jak

Reply
  • 0

    The files are all check-summed and signed so even if HTTP is used, the endpoint wouldn't deploy anything not expected. None of the files pulled over the updating channel are unique to you they are just the standard files of the install sets.

    https://community.sophos.com/kb/en-us/127537 should answer at least part of the question.

    The biggest issue I've seen with HTTP is third party proxies/devices blocking Sophos files as suspicious as they are downloaded by AutoUpdate. As less of those will be doing SSL inspection, there should be less false positives from third party vendors breaking updating.

    At the client, evidence of AutoUpdate using HTTPS for updates is the flag "UseHttps = 1" in the file C:\ProgramData\Sophos\AutoUpdate\Config\iconn.cfg

    Regards,

    Jak

Children
No Data
Unfiltered HTML