Solution: After the replacement Management Appliance has had configuration data restored to
it, and you have ensured that its fully qualified domain name and IP address are correct, each
Web Appliance that was joined to the previous Management Appliance must be reverted to
standalone mode, then be re-joined to the replacement Management Appliance.
New Management Appliance uploading Web Appliance data produces
AD error alerts
Problem: When you join an established Web Appliance to a new Management Appliance, with
the Copy configuration and policy data from the first web appliance to join option selected
on the Management Appliance, the Management Appliance raises Active Directory integration,
Active Directory synchronization, and possibly Active Directory Trusted Domains
synchronization alerts.
Cause:The uploaded configuration data from the Web Appliance includes Active Directory access
configuration, but the firewall between the new Management Appliance and the Active Directory
server has not been configured to open the required ports.
Solution: Configure your firewall to provide access to the ports and services listed in the following
tables.
External Connections
ConnectionProtocolServiceFunctionPort
Outbound from appliance to
sophos.com
TCPSSHRemote assistance22
Outbound from Web Appliance to
Management Appliance (if not
collocated)
TCPSSHCentral configuration, status and
reporting
22
Outbound from appliance to
sophos.com
TCPSMTPRemote assistance notification25
Outbound from appliance to internetTCPHTTPOutbound network web traffic80
Outbound from appliance to internetUDPNTPNetwork time synchronization123
Outbound from appliance to internetTCPHTTPSOutbound network web traffic443
Internal Connections
ConnectionProtocolServiceFunctionPort
Outbound from appliance to FTP
server
TCPFTPBackups using passive FTP21
Sophos Web Appliance | Appliance Behavior and Troubleshooting | 211
To Next Page
Loading...
Need help?
General
