# SOPHOS

[Firewall Training Playlists](onenote:Firewall%20Training%20Playlists.one#section-id={c3621b3d-9776-47d8-bf93-6e3817e6a658}\&end)  ([Web view](https://onedrive.live.com/redir?resid=819F8ACA231BBBF3%21186\&page=Edit\&wd=target%28Firewall%20Training%20Playlists.one%7Cc3621b3d-9776-47d8-bf93-6e3817e6a658%2F%29\&wdorigin=717\&wdpreservelink=1))&#x20;

List of servers and ports&#x20;

Component    URL    Ports     Comments&#x20;

Wing    &#x20;

primary.wing.sophosxl.net&#x20;

peak.wing.sophosxl.net&#x20;

80, 443, 6060, 6061     Web Proxy Categorization&#x20;

nsxld     4.sophosxl.net     443     Web Categorization in v17+&#x20;

DDNS    checkip.cyberoam.com    80     Dynamic DNS Check IP Service&#x20;

Up2Date    u2d.sophos.com&#x20;

ap-southeast-1.u2d.sophos.com&#x20;

eu-west-1.u2d.sophos.com&#x20;

eu-central-1.u2d.sophos.com&#x20;

ap-northeast-1.u2d.sophos.com&#x20;

us-west-2.u2d.sophos.com&#x20;

us-east-1.u2d.sophos.com&#x20;

443    Up2Date is responsible to check for new Firmware Updates and Updates AP Firmware, ATP, Avira AV, Authentication Clients, IPS & Application Signatures, RED Firmware, Sophos AV, SSLVPN Clients, WAF&#x20;

Commtouch AS    iprep%d.t.ctmail.com&#x20;

resolver%d.ast.ctmail.com&#x20;

80, 443     Anti Spam Scanner&#x20;

Commtouch AV (for Small Boxes)    oem.avdl.ctmail.com    80     Additional AV Scanner&#x20;

Heartbeat    utm.cloud.sophos.com&#x20;

dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com&#x20;

80, 443    For Sophos Security Heartbeat functionality&#x20;

RED    red.astaro.com&#x20;

red-prov-eu.astaro.com&#x20;

red-prov-as.astaro.com&#x20;

red-prov-us.astaro.com&#x20;

TCP & UDP 3400 (RED10)&#x20;

TCP 3400, UDP 3410 (All others)     Provisioning server for RED devices&#x20;

Licensing    eu-prod-utm.soa.sophos.com/api/device/1/applianceactivation&#x20;

eu-prod-utm.soa.sophos.com/api/device/1/accountregistration&#x20;

eu-prod-utm.soa.sophos.com/api/device/2/license&#x20;

eu-prod-utm.soa.sophos.com/api/device/1/subscription&#x20;

eu-prod-csr.soa.sophos.com/api/certificate/1/signing&#x20;

eu-prod-utm.soa.sophos.com/api/device/1/appliance&#x20;

443     License sync and activation&#x20;

SAR Report    sarreport.sophos.com&#x20;

443     SAR Report Server&#x20;

SCFM    us-e1.cfm.sophos.com/&#x20;

eu-w1.q.cfm.sophos.com/&#x20;

eu-w1.d.cfm.sophos.com/&#x20;

443     Sophos Cloud Firewall Manager&#x20;

APU    eu1.apu.sophos.com    443     Support access proxy&#x20;

Sandbox    &#x20;

sandbox.sophos.com&#x20;

eu.sandbox.sophos.com&#x20;

us.sandbox.sophos.com&#x20;

apac.sandbox.sophos.com&#x20;

\*.sophosxl.com&#x20;

\*.sophosxl.net&#x20;

\*.sophosupd.com&#x20;

\*.sophosupd.net&#x20;

\*.mojave.net&#x20;

443     Sandstorm Sandboxing technology&#x20;

NTP    pool.ntp.org    123     Network  Time Protocol&#x20;

Telemetry    sftelemetry.sophos.com&#x20;

443     Telemetry data &#x20;

Central Synchronization    &#x20;

dzr-utm-amzn-us-west-2-fa88.upe.p.hmr.sophos.com&#x20;

utm.cloud.sophos.com/api/utm&#x20;

443    Synchronized Application Control, Manage your XG Firewall devices centrally through Sophos Central&#x20;

Central Management     us-e1.cfm.sophos.com     443     Central Firewall Management&#x20;

Firewall management in Sophos Central      \*.sophos.com    TCP 22, 443      Allow access to dynamic hostnames matching \*.sophos.com&#x20;
