We are both a Sophos AV end point user as well as a Sophos Web Protection Appliance User.
We integrate the two together - having the Web Control Policy point to the Appliance - and the Appliance control shows connected endpoints. A simple test on the connected endpoint of a disallowed website yields the desired result - when it's working correctly.
However, just recently, I noticed that the list of connected endpoints in the appliance was unusually low. There were scores of old workstations listed that were greyed out. But there were also new workstations lists that were greyed out - and up and running live. One of them was mine. So I went to a disallowed website and got right in. Not good.
I opened up a ticket with Sophos Support and thus far they've identified the issue, but we haven't gotten to the fix yet. The support office is in Manila - so it's 13 hours away and there are language barriers. So, I'm posting this here looking for ideas.
Basically, they pointed out that the Sophos Web Intelligence Service a.k.a. swi._service.exe is not listed in my list of local services. On the machines where it is working, it is listed. However, the executable swi._service.exe does exist on my machine. It's just not registered as a service. If I double click on the file, it runs (I see it in the task manager) and then magically, the appliance sees my machine as active and blocks disallowed sites. But if I reboot my machine, the service ends and isn't reloaded BECAUSE IT ISN"T REGISTERED
Reinstall did not fix it.
Suggestions?
Adam in DC
This thread was automatically locked due to age.
