Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 9 replies
  • Subscribers 27 subscribers
  • Views 1281 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Secure heartbeat with different registered accounts

Carlos Cesario

Hello,

Could someone please inform how to procede in the following scneario ?


Currently my end Customer has a XG device and now he acquired the Sophos Endpoint license.
We are trying enable heartbeat detection in XG firewall, but the XG firewall is registred by one account (the XG device is rented) and the Endpoint License is registred by other account (End cusotmer account)

 

how to procede in this case ?

What is the best way to to it, considering the different registred accounts  for each product.

 

Regards

Carlos



This thread was automatically locked due to age.
Parents
  • 0

    Hello Carlos,

    Thank you for contacting the Sophos Community.

    In this case, you would only need to enable Sync Security in the XG and enable Heartbeat in Central.

    The XG will not care about the Certificate of the Endpoint and only the health status.

    The endpoint will use the NTP component to send packets to the magic IP 52.5.76.173 over port 8347.
    Once the traffic hit's the XG, the XG can note down the heartbeat status and relays this back to the endpoint
    The XG will now know the heartbeat status of the endpoint and apply restrictions based on its health

    Regards,

  • 0 in reply to emmosophos

    Hi  

    Today we started the deployment of Endopint.

    Before install Endpoint on the computer I enabled the Security Heartbeat on the XG device previous registred on Sophos Central.

    After installed the endpoint in 2 Worstations and 1 Server we  decided monitoring the Sophos XG to check if the syncronization it works, but after 3 hous none info it was diplayed and in this period, none info pass by tcpdump with destination to host 52.5.76.173.

     

    I already tried restart the service on XG

    # service heartbeat:restart -ds nosync

    No tcpdump data

    # tcpdump -i any  host 52.5.76.173

    Is there any more step to do ? Could you please assist us with this ?

     

    best regards,

    Carlos

     

Reply
  • 0 in reply to emmosophos

    Hi  

    Today we started the deployment of Endopint.

    Before install Endpoint on the computer I enabled the Security Heartbeat on the XG device previous registred on Sophos Central.

    After installed the endpoint in 2 Worstations and 1 Server we  decided monitoring the Sophos XG to check if the syncronization it works, but after 3 hous none info it was diplayed and in this period, none info pass by tcpdump with destination to host 52.5.76.173.

     

    I already tried restart the service on XG

    # service heartbeat:restart -ds nosync

    No tcpdump data

    # tcpdump -i any  host 52.5.76.173

    Is there any more step to do ? Could you please assist us with this ?

     

    best regards,

    Carlos

     

Children