Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 33 replies
  • Subscribers 1 subscriber
  • Views 136161 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Protection in Sophos Endpoint Protection 10

bwyatt

Hello,

I am having a considerable problem.

I just upgraded our Sophos Enterprise Console to v10 and everything went smoothly. I also noticed the Patch Assessment and Web Protection under Policies, so once I changed the SUM to use v10 for the client machines, I went to enable both the Patch Assessment and Web Protection.

Long story short, it didn't work. Eventually I checked the 'Detail' button and the licenses did not appear for Patch Assessment or Web Protection. This confused me: why even present the option to configure patch and web at all if you don't even have the ability to use it?

So I went back and disabled them both, did a 'comply with all group policies' update and moved on.

I then went to check my email (we use Google Apps) and it kept giving me an SSL error. Then my users started complaining of the same thing. Since I essentially troubleshoot things for a living, I turned off the web protection on my local Sophos configuration because it was the last thing I changed - this then allowed me into gmail. There were no error logs for this.

Problem is, it didn't care what options I set on the Enterprise Console. Even though I disabled web protection, is refused to let go of its settings and it remained on despite restarts, updating Sophos again and even deleting the computer from the console, re-adding and re-installing. Nothing worked.

Eventually I just disabled and stopped the Sophos Web Intelligence Service, that worked. That is far from ideal though. I need to be able to manage Sophos from the console as intended. My users cannot change the setting on their local Sophos (despite tamper protection being disabled at the console policy) and I don't want to have to have a disabled service to fix this; for all I know it affects other anti-virus processes!

Sorry for the long windedness but I wanted to try and answer as many questions as possible rigth off the bat.

Any assistance??

:19817


This thread was automatically locked due to age.
Parents
  • 0
    Unfortunately, turning Web Protection and Web Control does not resolve the issues that I and others are having. The only solution is to disable the Sophos Web Intelligence Service. I have an open ticket with Sophos Support. All they keep saying is that my issue should be resolved in the next update release. This first started back when I was at 10.0.1. Now I'm at 10.0.3 with the same issue. It would be great if 10.0.4 fixes the problem. I'll believe it when I see it. For those interested, we use Novell iPrint to add printers to local computers via a web interface. This enables end users to be able to install their own printers instead of having to contact IT directly. When the Sophos Web intelligence Service is enabled, the iPrint web page does not install printers and ends up locking up. If we disable WIS, adding printers via iPrint works fine. Instead of having to disable the service within Windows, there needs to be an option in Sophos Enterprise Console to manage WIS. Hopefully, 10.0.4 will have some additional functionality to manage things better.
    :24041
Reply
  • 0
    Unfortunately, turning Web Protection and Web Control does not resolve the issues that I and others are having. The only solution is to disable the Sophos Web Intelligence Service. I have an open ticket with Sophos Support. All they keep saying is that my issue should be resolved in the next update release. This first started back when I was at 10.0.1. Now I'm at 10.0.3 with the same issue. It would be great if 10.0.4 fixes the problem. I'll believe it when I see it. For those interested, we use Novell iPrint to add printers to local computers via a web interface. This enables end users to be able to install their own printers instead of having to contact IT directly. When the Sophos Web intelligence Service is enabled, the iPrint web page does not install printers and ends up locking up. If we disable WIS, adding printers via iPrint works fine. Instead of having to disable the service within Windows, there needs to be an option in Sophos Enterprise Console to manage WIS. Hopefully, 10.0.4 will have some additional functionality to manage things better.
    :24041
Children
No Data