Sophos STAS need port 1220 to be open on client side

Hello, thank you for your query...

The Active Directory Server should have the following ports open:

• STA Collector > XG Firewall (UDP 6060)
• XG Firewall > STA Collector (UDP 6677)
• STA Agent > STA Collector (TCP 5566)

You only need to enable the following ports if you are using these methods:

Workstation Polling Methode (WMI) oder Registry Read Access:

• Outgoing TCP 135
• Outgoing TCP 445

Logoff Detection Ping:

• Outgoing ICMP

STAS Collector Test:

• Incoming/Outgoing UDP 50001

STAS Configuration Sync:

• Incoming/Outgoing TCP 27015

Hello, thank you for your query...

The Active Directory Server should have the following ports open:

• STA Collector > XG Firewall (UDP 6060)
• XG Firewall > STA Collector (UDP 6677)
• STA Agent > STA Collector (TCP 5566)

You only need to enable the following ports if you are using these methods:

Workstation Polling Methode (WMI) oder Registry Read Access:

• Outgoing TCP 135
• Outgoing TCP 445

Logoff Detection Ping:

• Outgoing ICMP

STAS Collector Test:

• Incoming/Outgoing UDP 50001

STAS Configuration Sync:

• Incoming/Outgoing TCP 27015

Hello,

I allowed both port 135 and 445 on Eset Internet security on my machine but the test doesn't work until i allowed the inboud in port 1220.

That's weird, but you should check the complete working of the STAS in the following link below: 
https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/125318/sophos-xg-firewall-best-practice-for-stas

This will clear your perspective of the working & configurations of STAS and the ports used...

Thanks Vivek Jagad

just i want to inform Sophos for this :D

Don't need 1220 -- the information in the Best Practice doc linked above is accurate.  I'm not Sophos, but I have been reselling/ implementing STAS since it came out for my customers.