This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Enterprise Console/Software Restrictions

Hi all,

Having a problem with getting our Sophos endpoints up and running.

If a client is protected with the endpoint software and a user logs in that has software restriction GPO's applied to it, something blocks access to Internet browsing.

I've narrowed it down to a single GPO that contains the software restrictions, and if they are disabled (or changed to unrestricted) then the user can browse the Internet.

The message that appears is that the browser cannot connect to the proxy server.

Is there a clash somewhere? or a setting that needs amending?

I've tried fully disabling all policies but there still isn't any connection.

Strangely, as an Admin I can browse the Internet if I run Chrome with my credentials, but I'm assuming it's because there are no active software restrictions imposed on my account, and the proxy settings are taken from the registry.

Sophos Enterprise Console 5.1
Windows Domain - Standard users no admin rights

Thanks in advance 
Tom

:46331


This thread was automatically locked due to age.
Parents
  • Hello Tom,

    so, you are about to deploy Sophos for the first time or ...?

    something blocks access [...] I've narrowed it down to a single GPO

    If I understand correctly it works when either Sophos is not installed or the software restrictions are disabled. Then this something is likely a policy rule affecting a Sophos component. You've mentioned Chrome - is this your site's standard browser and are all browsers affected?

    I've tried fully disabling all policies

    You are not referring to the software restriction policies here, are you?

    Anyway, are there no entries in the Event log or other messages apart from cannot connect to the proxy server (you have to use a proxy for all connections?)? If not, perhaps advanced logging (please see Troubleshoot Software Restriction Policies) might give a hint.

    Christian

    :46411
Reply
  • Hello Tom,

    so, you are about to deploy Sophos for the first time or ...?

    something blocks access [...] I've narrowed it down to a single GPO

    If I understand correctly it works when either Sophos is not installed or the software restrictions are disabled. Then this something is likely a policy rule affecting a Sophos component. You've mentioned Chrome - is this your site's standard browser and are all browsers affected?

    I've tried fully disabling all policies

    You are not referring to the software restriction policies here, are you?

    Anyway, are there no entries in the Event log or other messages apart from cannot connect to the proxy server (you have to use a proxy for all connections?)? If not, perhaps advanced logging (please see Troubleshoot Software Restriction Policies) might give a hint.

    Christian

    :46411
Children
No Data