Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 760 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Client Firewall - Which firewall policy is my device using?

tcshain

Hello Folks,

My company is undergoing a security audit, and I have been tasked to pull some information from our user workstations regarding the Sophos Client Firewall.

My Sophos Enterprise Console has been configured with several custom firewall policies.

Once I have installed the firewall on an endpoint, I would like to verify that is using the correct firewall policy.

I have looked into the logs that are generated locally, but I do not see any line that mentions what policy my endpoint is subscribed to.

Is this information found any where on the local device?

Thanks in advance!

:35849


This thread was automatically locked due to age.
  • 0

    Hellp tcshain,

    the rawadaptercfg (no extension) XML file in the adapter storage (...\Sophos\Remote Management System\3\Agent\AdapterStorage\SCF) contains the RevID which matches the CorrelationID in the dbo.Policies table in the database. In addition you'd have to check that the client complies - see HKLM\SOFTWARE\[Wow6432Node\]Sophos\Sophos Client Firewall\Config.

    HTH

    Christian

    :35871