Hello, my current setup has the Sophos appliance on our edge performing all NAT/VPN connections for my home. We have several computers that use Endpoint Protection and I would like to place a Juniper SRX at my edge and move the Sophos to filter only web traffic.
I know before you say leave it at front, I am creating some new rulesets that the Astaro does not appear to support (basing rules on packet TTL for example). I only have 1 public IP so this change will make the UTM behind a NAT, my question is what access from the internet is needed for Endpoint Protection to work with updates?
Does the UTM phone home to allow such clients to update? Or do the clients talk to the UTM directly for it.
Thanks in advance for clearing this up [:)]
This thread was automatically locked due to age.
