Our Endpoints try to access this server frequently and the firewall log is full with errors due to the server not responding. I non't know by which component.
Some requests are successful though.
Can you please check if the server has a problem that can be fixed so the logs here do not flood unnecessary?
Checking netstat it seems the browsers, chrome, firefox initiate a connection to that URL also. What is that URL used for?
Hi LHerzog,
I've reached out to our Central Platform team to inquire about this. I will follow up with you here with any additional information I receive.
Do these errors continue to occur regularly, or has this only started happening recently?
Just to confirm, we have the same errors.
The feedback I received from our team is that this is somewhat expected. At times when Sophos servers are experiencing increased load, these sorts of errors may occur.
In particular on August 15th, when this thread was raised, this was the case.
Hi Maximilian,
Are you observing any other issues on the environment outside of these errors being generated? If so, I'd suggest opening a support case with our team so this can be looked into.
our logs are still getting hammered with these errors when our Admins are using Sophos Central in their browser - will Sophos fix that someday?
Sisense is probably 3rd Party customer "intelligent analytics" whatever that means, that is integrated into sophos central. https://www.sisense.com/
Some additional information can be found here:
- Sophos Trust: Sisense Data Breach
Sophos Customer data has not been affected.
...through our own detailed investigation of logs, we have not discovered any suspicious activity or compromise of Sophos or Sophos customer data. Sophos continues to monitor and validate that customers are not affected.
