Sophos Endpoint Security and Control cannot Install behind UTM9

Dear Community,

we have a Cluster of two SG310 Devices on Version: 9.4.09-9

We use the Firewalls (Endpoint Protection) to Monitor AV on all our Devices.

We Deploy the AV-Software via Login Script:

@echo off
SET MCS_ENDPOINT=Sophos\Management Communications System\Endpoint\McsClient.exe
IF "%PROCESSOR_ARCHITECTURE%" == "x86" GOTO X86_PROG
IF NOT EXIST "%ProgramFiles(x86)%\%MCS_ENDPOINT%" GOTO INSTALL
exit /b 0

:X86_PROG
IF NOT EXIST "%ProgramFiles%\%MCS_ENDPOINT%" GOTO INSTALL
exit /b 0

:INSTALL
pushd \\server\share$\Sophos
SophosMcsEndpoint_ABCDEFG123456.exe -q
Popd

We downloaded the Exe-File from link that is shown the Firewall itself.

We use this method since almost 1 Year now without any problems.

I recently came across a fresh PC that didn't want to install the actual AV Module of the Sophos Endpoint and Control Package.

The Updater is Installed but the main Module is missing.

I tried a manuall install and it said, that it cannot Update due to communication issues to Sophos.

I took the PC to my home (normal ADSL with AVM Fritzbox) and it instantly found the Sophos Server, updated and installed the missing Module Antivirus

I assume it has something to do with our transparent proxy or firewall settings but I don't understand why the UTM should block its own product.

I took a look at the Firewall Log and startet a update of AV on my PC no logs showed up, so it might not be a default firewall policy block...

We don't allow any to any outgoing...

All Surfing is taken over by the Transparent Proxies. for certain services we open Ports with Nat

Maybe we need to open ports ?

Thanks for advice.

Michael

IT-Service