Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=DNS-protection-add-a-location

Add a location

To add a location, specify the external or public IP address or FQDN used for traffic going to the internet. This may be the address of your firewall or router.

You can add a maximum of 50 locations to DNS Protection.

To add a location, do as follows:

  1. Go to My Products > DNS Protection > Locations.
  2. Click Add.
  3. Enter a name and description for the location.

  4. In IPv4 addresses or FQDNs, you can add auto-detected IP addresses or manually add the public IP addresses or FQDNs of your location.

    If you select Add known IPs, Sophos Central shows a list of suggested IP addresses, including your licensed firewalls' known public IP addresses and the IP address from which you're currently connecting to Sophos Central.

    Note

    Sophos Central only detects the IP addresses of the firewalls with an Xstream Protection license.

    To add auto-detected IP addresses to your location, do as follows:

    1. Click Add known IPs.

    2. Take one of the following steps:

      • If you're adding the IP address of your current location, under Your Current Location, select the IP address and click Add.

        If you're accessing Sophos Central through a VPN, Your Current Location shows the IP address of your VPN server, not the IP address of the network you're connected to.

      • If you're adding Sophos Firewall as a location, under Your Firewalls, select the firewall's IP address and click Add.

        Your Firewalls shows the IP address the firewall is using to connect to Sophos Central. If your firewall has multiple WAN interfaces, we recommend you manually add any IP addresses that aren't auto-detected.

        Note

        DNS Protection doesn't automatically update your detected IP address if it changes in the future. If your IP address is likely to change, we recommend you set up a Dynamic DNS service and manually add the Dynamic DNS hostname to the location. See Dynamic DNS.

    Manually type in or paste the IPv4 addresses or FQDNs for the location.

    These must be external IP addresses of your network or gateway device. They're usually the IP addresses of your router's WAN interface.

    Note

    Don't enter internal IP addresses in ranges such as 10.x.x.x, 192.168.x.x, and 172.16.x.x.

    If you're adding Sophos Firewall as a location, do as follows:

    • If your firewall has a single WAN interface, add the WAN interface's IP address.
    • If your firewall has multiple WAN interfaces, add all of those IP addresses or add an IP address range.
    • If your firewall's IP address is dynamic, add the firewall's hostname that's registered with the Dynamic DNS (DDNS) provider. See Dynamic DNS.

    You can add multiple IP addresses or FQDNs. Maximum items: 100.

    Press Enter or Tab after you add each item, even if you're adding a single item. If you're copying and pasting, ensure the copied list has a line break between each item.

    Click the Copy icon Copy icon. to copy these IPv4 addresses or FQDNs and paste them elsewhere.

  5. Click Save.