Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 12 replies
  • Answers 1 answer
  • Subscribers 29 subscribers
  • Views 10551 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG: How to I completely disable, turn off, delete Web Proxy and Web Protection

rglaue

I do not want Web Protection, or Web Proxy Categorization - which connects to outside servers (https://community.sophos.com/kb/en-us/126576) every 3-8 seconds to gather updated information.

Additionally, in CONFIGURE > System services > Services > Web proxy, there is only a [Restart] button, and not any [Stop] button like the other services. I want to Stop this service completely.

How can I completely (100%) Stop, disable, and remove Web Protection, Web Proxy Categorization, and Web Proxy?



This thread was automatically locked due to age.
  • 0 in reply to lferrara

    Your recommendation ended up being exactly what Sophos told me.

    Sophos tech said:

    Please run the below command to stop the web proxy but this will only stop it not disable it which means whenever you will restart the firewall it will restart the service as well and you have to again run the command. This is by design and none of the sophos services can be disabled

    service awarrenhttp:stop -ds nosync ( Run this command in Advanced shell)

    Web categorization updates are done by WING service and you can Stop it by running the below command 

    service WINGc:stop -ds nosync ( Please run this command in advance shell)

    These commands did stop the HTTP requests to update Web Proxy Categorization.

     

    However, regarding the thought discussed in this thread, that if you are not licensed to use Web Proxy, maybe it won't be active? - This is not true.

    Sophos tech said:

    If you will not have web proxy licence, it will still be reaching out to sophos servers but sophos servers will be denying the request. 

     

    I did ask if these services can be made to be disabled.

    Sophos tech said:

    Unfortunately, you cannot disable the services and it will be a feature request 

     

    I find it to be very disappointing that I cannot permanently disable user services. Even if I do not license it, the service still runs on the SXG.

  • 0 in reply to rglaue

    It is disappointing me too.

    or  

    could you investigate about this limitation and what the user can do?

    Having such a feature on XG virtual appliance should be considered.

    Thanks