Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 3 subscribers
  • Views 7112 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sopos UTM blocking Sophos Cloud Endpoint Updates

vulcan4d
I have a Sophos UTM dropping packets coming from 208.111.155.130 (dci.sophosupd.com) even if I allow it in the Firewall rules.

Is there anything else that needs to be done on a Sophos UTM to allow Sophos Cloud Endpoint Protection updates?  If I choose to update the agent on the computer, it starts the update and eventually stops.  In the UTM firewall log it shows that packets from the Sophos IP is being dropped.

Any assistance would be greatly appreciated.


This thread was automatically locked due to age.
  • 0
    Show the applicable lines from the firewall log.  Also check the web filtering and intrusion prevension logs to see if blocks are being triggered there.
  • 0

    Hi Scott,

    Similar problem here. When I setup new endpoints the PC errors out with the same message. As soon as I move the PC off the UTM protected network it updates fine. I've also noticed that disabling Web Protection temporarily allows the update to proceed. Sophos provided exceptions within the filter do work as I have local content cache servers (new feature in cloud managed endpoint) that do contact the Sophos update service just fine.