Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 3155 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SEC updating policy Proxy settings and Mac clients

jgrindlay

Hi there,

We've just setup an update server in a DMZ so that our roaming users can update off our server, inside or outside of our company and it appears to be working well.

We've set an update policy for this server so that the primary location is our server, and the secondary is Sophos.

Neither of these locaiton should require a proxy to be set (inside our network, our endpoints should contact our server (no backup), outside, they'll get either our server or the main sophos ones as a backup)

On our Macs, beacause no proxy details are being set by the SEC policy, its coming up as 'use system proxy' instead rathaer than the expected case of 'use no proxy'

At the moment, our Mac fleet has autoproxy detection, so inside work they pick up our proxy, and outside our network, they'll get nothing.

I'd like some way of saying, you don't need any proxy and not have the sophos Mac client going 'oh, no proxy set, so I'll obey whatever the mac system proxy is'

I thought of setting a blank proxy - ie tick the use proxy box, but put no details in, but it pops up a dialogue "You must enter the proxy address"

I'm currently on SEC 5.0 and the Mac client on my test mac is: 8.0.11

Any thoughts or ideas?  There might be an obvious answer staring me in the face, but I'm missing it :)

Malcolm

:37733


This thread was automatically locked due to age.
Parents
  • 0

    Hello Malcolm,

    that older article looked promising with that line about Proxy is enabled, but no proxy url is entered

    if you read carefully :smileywink: you'll notice the asterisk - the associated note says: Enterprise Console 4.0, requires a proxy to be entered when this setting is enabled. If you wish to use the 'Do not use proxy' setting for a client computer, please configure the following proxy address in the updating policy in Enterprise Console 4: http://noproxy.sophos.com. Indeed the Mac seems to correctly select Do Not Use Proxy if you enter this address - but as said, this doesn't go well together with Windows clients which try to use this address. Thus the workaround is only usable if you have Mac-only groups. Ideally SEC's GUI should expose the third option - but at least the Windows clients must correctly interpret the policy (whether the option is passed with this dummy URL or an additional tag in the XML).

    Dunno about your vendor - usually all they can do is to relay your query. If you can make a good case it's probably better to submit a feature request directly.

    Christian

    :37769
Reply
  • 0

    Hello Malcolm,

    that older article looked promising with that line about Proxy is enabled, but no proxy url is entered

    if you read carefully :smileywink: you'll notice the asterisk - the associated note says: Enterprise Console 4.0, requires a proxy to be entered when this setting is enabled. If you wish to use the 'Do not use proxy' setting for a client computer, please configure the following proxy address in the updating policy in Enterprise Console 4: http://noproxy.sophos.com. Indeed the Mac seems to correctly select Do Not Use Proxy if you enter this address - but as said, this doesn't go well together with Windows clients which try to use this address. Thus the workaround is only usable if you have Mac-only groups. Ideally SEC's GUI should expose the third option - but at least the Windows clients must correctly interpret the policy (whether the option is passed with this dummy URL or an additional tag in the XML).

    Dunno about your vendor - usually all they can do is to relay your query. If you can make a good case it's probably better to submit a feature request directly.

    Christian

    :37769
Children
No Data