This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Open Ports to Github and Google Cloud

I work at a school district and we have a Robotics club. The teacher has requested the following:

"We need port 22 opened to GitHub for code updates. Also, port 3306 needs to be opened to the databases on the Google Cloud (<IP Address 1> and <IP Address 2>)."

This seems like a big risk to have it wide open, even if it is only outbound. Any thoughts on how to allow this and still keep things as secure as possible? We are required to filter the student's traffic, so I am concerned they will just use this to bypass our filter (we use Sophos XG for firewall and web filter).

This thread was automatically locked due to age.

Parents

0 Keyur over 4 years ago

Hi K M

As rightly said by rfcat_vk you may configure FQDN host for GitHub URLs required to access the data from GitHub and allow SSH and HTTPS service only.

Bryan Cross It would be great if you could share the list of URLs required to access the data as requested.

Regards,

Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Keyur over 4 years ago

Hi K M

As rightly said by rfcat_vk you may configure FQDN host for GitHub URLs required to access the data from GitHub and allow SSH and HTTPS service only.

Bryan Cross It would be great if you could share the list of URLs required to access the data as requested.

Regards,

Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Bryan Cross over 4 years ago in reply to Keyur

I can try :) . GitHub URLs use the account holder or an organization as their root. So for example, if my GitHub userid is johndoe, all my stuff is going to be under https://github.com/johndoe/*. If the robotics team has an organization (which I recommend but it's not necessary), then it'd be the name of the org, e.g., https://github.com/roboteam/. The homepage, https://github.com, is the user landing page and provides a feed of events, notifications, and handy links.

Let me know if you need anything else. If I can't provide answers myself I've got access to folks who can. As a company we're _extremely_ supportive of education, so we'll definitely work with you. Thanks again. Happy to hop on a call if that would be quicker/more efficient. -- Bryan
Cancel
Vote Up 0 Vote Down

Cancel
0 Keyur over 4 years ago in reply to Bryan Cross

Hi Bryan Cross

Thank you very much for your response. Much appreciated!

Regards,

Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel