Skip to content
Last update: 2022-04-14

Migrate the EAS proxy

If you’re using the EAS proxy for Sophos Mobile, you must configure it for Sophos Central.

If you’re using the internal EAS proxy for Sophos Mobile, you must set up the standalone EAS proxy instead. The internal EAS proxy isn’t available for Sophos Central. See Standalone EAS proxy.

If you’re already using the standalone EAS proxy, you must update its configuration. Do as follows:

  1. Sign in to Sophos Mobile Admin.
  2. Click Setup > Sophos setup > EAS proxy.

    Keep this page open. You need to interact with it in the next steps.

  3. On the computer on which you’ve installed the standalone EAS proxy, select Sophos Mobile EAS Proxy > EAS Proxy Configuration Wizard from the Windows Start menu to start the configuration assistant.

  4. On the Sophos Mobile server configuration page, enter the server URL that is displayed on the Sophos Central Admin page under External.

    The URL of the Sophos Mobile server

    Enter the server URL in the EAS Proxy Configuration Wizard

  5. On the EAS Proxy instance setup page, click Export config and upload to Sophos Mobile server.

    The folder that contains the proxy certificate opens.

  6. Upload the certificate to Sophos Central:

    On the Sophos Central Admin page, click Upload a file, go to the certificate file, and click Open.

    Upload EAS proxy certificate

  7. If you’ve configured more than one EAS proxy instance, repeat the previous steps to upload the certificates of the remaining instances.

  8. On the last page of the configuration assistant, ensure that the option to start the EAS proxy service is selected.

    Select the option to start the EAS proxy service

  9. If you turned off mail filtering before starting migration, turn it on again:

    • For the standalone EAS proxy in proxy mode:

      Open the EAS proxy’s configuration file, easproxy.conf.xml, and change all occurrences of the text verificationEnabled="false" to verificationEnabled="true".

    • For the standalone EAS proxy in PowerShell mode:

      Run the Set-ActiveSyncOrganizationSettings PowerShell command to set the DefaultAccessLevel parameter to the value you used before starting migration.

Back to top