This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Web Appliance & Endpoint network traffic

My company is in the process of testing the Sophos Virtual Web Appliance being integrated with Endpoint and have run into a lack of information and was hoping someone here is running a similar setup and had some statics to share.

We are in the middle of rolling out Endpoint v10 and also purchased the Virtual Web Appliance to do logging/filtering to around 3,000 users spread out over 100+ remote sites of varying size and internet connections.  We haven’’’’t been able to find any information online or from Sophos about what type of network traffic we can expect all of these Endpoints to generate.

The most information I’’’’ve gotten from tech support is the endpoints send the logs back to the appliance once every 45seconds.  However, the size amount of traffic generated varies based on how much surfing was done, and if the site was blocked, allowed, or warned.  They have no whitepapers or information giving even a general ballpark range of network traffic the Endpoint would be sending back to the appliance for low/medium/high internet users.

I’’’’m hoping someone here has deployed the Web Appliance with Endpoint and has some data they are able to share regarding the load this puts on the network, or any issues they have had with this setup.

Thanks,

Joe

:27923


This thread was automatically locked due to age.
Parents
  • I too am in the final stages of putting in Web Appliances though we have a bit more traffic. We will be filtering about 20K endpoints/users when it is all said and done. In my tests I deployed a the endpoint web control via the enterprise console and it works great. I didnt see a rise in traffic really and these are about 400 students, teachers, and admins at one of our sites. We have had Sophos Antivirus running for 2 years now and the network traffic they generate is no problem or really signifigant at all. When deploying web-filtering using the endpoint protection, the traffic doesnt come back to your appliance. Endpoints will get all of the policies from Sophos Live Connect. So you're network is not acting as a gateway for remote users. I would have gone this route if the endpoint filtering would do HTTPS filtering. Seems like that is the only real drawback for this. 

    :28219
Reply
  • I too am in the final stages of putting in Web Appliances though we have a bit more traffic. We will be filtering about 20K endpoints/users when it is all said and done. In my tests I deployed a the endpoint web control via the enterprise console and it works great. I didnt see a rise in traffic really and these are about 400 students, teachers, and admins at one of our sites. We have had Sophos Antivirus running for 2 years now and the network traffic they generate is no problem or really signifigant at all. When deploying web-filtering using the endpoint protection, the traffic doesnt come back to your appliance. Endpoints will get all of the policies from Sophos Live Connect. So you're network is not acting as a gateway for remote users. I would have gone this route if the endpoint filtering would do HTTPS filtering. Seems like that is the only real drawback for this. 

    :28219
Children
No Data