What ip addresses do clients with Sophos Server protection need access to?

Question

Hi, 
 
 I'm trying to install the Sophos server client on a server within a PCI environment. All external access is blocked, so I was trying to see which ip addresses the client needs access to, to download the software and for updates. There are quite a few different ones. 
 
 Does anyone have a list of IP addresses that I need to whitelist for Sophos; from installation and then to allow updates and management from Sophos Central? The servers that have allowed Port 443 to any seem to be updating ok, but I can't allow that in the environment these servers sit in. 
 
 Thanks, 
 Sherwin.

StephenMcKay · Accepted Answer

Hi Sherwin, 
 This article details the domains and ports needed to communicate with Sophos Central https://community.sophos.com/kb/en-us/121936 
 Updates will come via a CDN and the management platform is in AWS and both will use IP ranges and different POPs. 
 You might find that you need to follow this KB: https://community.sophos.com/kb/en-us/111428 
 Alternatively, you could use our Update Cache and Message Relay features to limit one machine that can do all of the communication needed to update and report into Sophos Central: https://community.sophos.com/kb/en-us/122577 
 Regards, 
 Stephen