Sophos Enterprise Console and UTM

UTM uses Sophos LiveConnect—a central cloud-based service—for protecting and monitoring endpoint computers. Policy updates are distributed to users, and reporting data from endpoint computers is uploaded, even when users are not connected from within the network.

When a Full Web Control policy is applied using a Sophos UTM appliance, Sophos Enterprise Console supplies the hostname of the Sophos LiveConnect broker used by UTM so that endpoints can communicate with it. The users’ endpoint software connects to that host and obtains a complete web-filtering policy. Users’ web activity data is sent back to the appliance via LiveConnect, while web event data (websites scanned and assessed by the live URL-filtering feature) is sent to Sophos Enterprise Console.