Method 2: Enterprise Console and Appliance
When a full web control policy is applied using either a Sophos Web Appliance or Sophos
Management Appliance, Enterprise Console supplies the hostname of the corresponding appliance
so that endpoints can communicate with it.The users’ endpoint software connects to that appliance
and obtains a complete web-filtering policy. Users’ web activity data is sent back to the designated
appliance, while web event data (websites scanned and assessed by the live URL-filtering feature)
is sent to Enterprise Console.
If necessary, the endpoint software performs URL classifications via SXL queries to Sophos. SXL
is the infrastructure that Sophos uses to submit real-time, DNS-based queries to SophosLabs
regarding IP addresses, URIs within messages, and image fingerprints.
52 | Getting Started | Sophos Web Appliance