Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=DNS-protection-add-a-location-legacy

Add a location (legacy)

This page shows you how to add a location if you haven't joined the early access program (EAP). If you've joined the EAP, see Add a location (Workspace Protection EAP).

To add a location, specify the external or public IP address, or FQDN used for traffic going to the internet. This may be the address of your firewall or router.

You can add a maximum of 50 locations to DNS Protection.

You can manually add the public IP addresses or FQDNs of your location or let DNS Protection automatically detect the IP addresses.

To get step-by-step instructions, click the tab for your method below.

To add auto-detected IP addresses to your location, do as follows:

  1. Go to My Products > DNS Protection > Locations.
  2. Click Add.

  3. Enter a name and description for the location.

    Note

    You can't use "Default" as the location name. It's reserved for use by DNS Protection.

  4. In IPv4 addresses or FQDNs, click Add known IPs.

    Sophos Central shows a list of suggested IP addresses, including your licensed firewalls' known public IP addresses and the IP address from which you're currently connecting to Sophos Central.

    Note

    Sophos Central only detects the IP addresses of the firewalls with an Xstream Protection license.

  5. If you're adding the IP address of your current location, under Your Current Location, select the IP address and click Add.

    If you're accessing Sophos Central through a VPN, Your Current Location shows the IP address of your VPN server, not the IP address of the network you're connected to.

  6. If you're adding Sophos Firewall as a location, under Your Firewalls, select the firewall's IP address and click Add.

    Your Firewalls shows the IP address the firewall uses to connect to Sophos Central. If your firewall has multiple WAN interfaces, manually add any IP addresses that aren't auto-detected.

    Note

    DNS Protection doesn't automatically update your detected IP address if it changes in the future. If your IP address is likely to change, we recommend you set up a Dynamic DNS service and manually add the Dynamic DNS hostname to the location. See Dynamic DNS.

  7. Click Save.

To manually add IP addresses to your location, do as follows:

  1. Go to My Products > DNS Protection > Locations.
  2. Click Add.

  3. Enter a name and description for the location.

    Note

    You can't use "Default" as the location name. It's reserved for use by DNS Protection.

  4. In IPv4 addresses or FQDNs, manually type in or paste the IPv4 addresses or FQDNs for the location.

    These must be external IP addresses of your network or gateway device. They're usually the IP addresses of your router's WAN interface.

    Note

    Don't enter internal IP addresses in ranges such as 10.x.x.x, 192.168.x.x, and 172.16.x.x.

    If you're adding Sophos Firewall as a location, depending on your firewall configuration, take one of the following actions:

    • If your firewall has a single WAN interface, add the WAN interface's IP address.
    • If your firewall has multiple WAN interfaces, add all of those IP addresses or add an IP address range.
    • If your firewall's IP address is dynamic, add the firewall's hostname that's registered with the Dynamic DNS (DDNS) provider. See Dynamic DNS.

    You can add multiple IP addresses or FQDNs. You can add a maximum of 100 items.

    Press Enter or Tab after you add each item, even if you're adding a single item. If you're copying and pasting, make sure the copied list has a line break between each item.

  5. Click the Copy icon Copy icon. to copy these IPv4 addresses or FQDNs and paste them elsewhere.

  6. Click Save.