sophos endpoint protection for mac connect to server

#Sophos endpoint protection for mac connect to server how to#
#Sophos endpoint protection for mac connect to server full#
#Sophos endpoint protection for mac connect to server registration#

Below is an example of the same site being blocked for the user while on the premises and then while roaming.Īs you can see the differences are small and unless the user is observant, they may not notice the difference at all.

Antivirus/Malware (Sophos Endpoint will always scan, but Dual scan and Max scanning size are not available)įrom the user’s perspective, everything should seem identical, or at least very similar.

The following features are not supportedin Endpoint Web Control

#Sophos endpoint protection for mac connect to server full#

There are some differences between the Web Control feature that runs on the endpoint, compared to the full Web Protection feature that runs on the UTM.

Differences Between On-Premises and Roaming Devices If all goes well, the allowed sites should be accessible and the denied sites should be blocked.

Then attempt to browse to sites that should be blocked.

Open a browser and attempt to browse to sites that would be allowed.

Disconnect the endpoint from the corporate network and connect it to an open Internet connection.

From there it will be retrieved by the endpoints based on the settings they receive from the Sophos Enterprise Console. Once the policy has been configured, Sophos UTM will sync the configuration to the Sophos LiveConnect infrastructure. Either create a new one, or use an existing one (recommended).

Filter Action will be the restriction you want to apply to roaming users.

Create a new policy without specifying any users (applies to anonymous).

Allowed Network is Sophos Live Connect (The object is auto-created for you).

Browse to Web Protection | Web Filtering Profiles | + Create New Profile.

#Sophos endpoint protection for mac connect to server registration#

In the Sophos LiveConnect Registration area, copy the SEC information Hostname and Shared-Key.Navigate to Endpoint Protection | Computer management | Global.Sophos UTM uploads the relevant policy to Sophos LiveConnect. Sophos UTM provides the policies that will be used by the endpoints, but it does not actually connect directly to the endpoint. Even the block messages are almost identical including your company logo.

The blocked and allowed sites and categories are the same. Here, Sophos Endpoint Web Control can then apply similar restriction to the users’s browsing as they would have while connected to the corporate network. The value of Endpoint Protection comes in when you have mobile users that take their corporate laptop and use them on open Internet connections. In this situation, adding web control on the endpoint does not provide any additional benefit. In an environment where you have fixed machines on the network (not traveling laptops) that are never exposed to the Internet directly, Sophos UTM will perform web protection for them. This method is suitable for large deployments that utilize one or more SECs.įor smaller deployments, please see our other article on how Sophos Endpoint Protection can be completely managed in small environments using Sophos UTM itself.

#Sophos endpoint protection for mac connect to server how to#

In this article we will show how to integrate Sophos Endpoint Protection’s Web Control module with Sophos UTM using Sophos Enterprise Console (SEC) policies.