Central Web Gateway

Hi B_B 

For the native Windows and MacOS agents, filtering is done at the endpoint level by pushing policy from Central. For the iOS and Chrome agents, all traffic is tunneled to our servers, there is no local filtering.

As per the error messages you are receiving when accessing your policies. This may be due to a known issue. Please refer to the following KBA: Cloud Web Gateway: Users may receive an intermittent error when accessing policies in Central Admin

Thanks,

Karlos

The error seems to be resolved and now it looks like the polices are now being applied.  I guess my question is now if everything is being done on the workstation how does SSL scanning work?  Also I setup the API to pull down the logs and it looks like I am not getting any of the logs from the Web Gateway.  Do we have the ability to get the logs using the Sophos API?

The error seems to be resolved and now it looks like the polices are now being applied.  I guess my question is now if everything is being done on the workstation how does SSL scanning work?  Also I setup the API to pull down the logs and it looks like I am not getting any of the logs from the Web Gateway.  Do we have the ability to get the logs using the Sophos API?

All enforcement and AV scanning is done locally on the native agents with policy management and reporting/logging done on Central

For APIs available for Central, please have a read at the following KBA: Sophos Central: API specification and documentation

For custom APIs, you can employ our Professional Services Team.

Thanks,
Karlos

I have API up and working on 7 different Central instances that do not have Web Gateway and I am getting all the web control events from the endpoints.  I am testing the Web Gateway on a separate Central instance and I am getting the endpoint logs, but not the Web Gateway.  Is there a different config.ini or siem.py file that I need to get the logs?