Solved

Cisco 837 Sophos updates

Posted on 2006-10-25
4
353 Views
Last Modified: 2010-03-17
We have some homeworkers who use VPN with Cisco 837 routers.
The antivirus we use is Sophos. Recently the updates have stopped working and the sophos website states that
"Where ever possible you should use DNS names rather than Ip addresses to reach the Sophos websites in scripts or config. files"

This is the access list we are using :

ip access-list extended Ethernet_in
 permit udp any any eq domain
 permit udp any any eq bootps
 permit udp any host 195.*.*.* eq isakmp
 permit tcp any host 51.*.*.* eq 5054
 permit udp any host 195.*.*.* eq 10001
 deny   udp any host 192.168.254.255 eq netbios-ns
 deny   udp any host 192.168.254.255 eq netbios-dgm
 permit ip any host 81.136.116.58 log
 remark Next line are to allow Sophos updates
 permit tcp any 213.86.172.0 0.0.0.255 eq www
 deny   ip any any log


and this is the statement earlier in the config

ip host sophos-updates 213.86.172.150

any suggestions
0
Comment
Question by:andrewwismith
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 12

Accepted Solution

by:
pjtemplin earned 250 total points
ID: 17803554
You can't use hostnames in access-lists.  Sorry.  You'll need to manually update them when changes occur.
0
 
LVL 17

Expert Comment

by:BudDurland
ID: 17807895
You could set up an in-house Sophos update server, and have the home workers get their updated there.  At the Sophos site, investigate Enterprise Manager.
0
 

Author Comment

by:andrewwismith
ID: 17851271
Thankyou. We already have an in house F-Secure server.
We have decided to drop Sophos and install F-Secure on our remote workers
 
0
 

Author Comment

by:andrewwismith
ID: 17851287
Sorry I meant to split the points
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This solves the problem of diagnosing why an internet connection is no longer working. It also helps identify the likely cause of the lost connection if the procedure fails to re-establish your internet connection. It helps to pinpoint the likely co…
Cable Modem Provisioning from DPoE compliant server  This Article is to support CMTS administrators to provide an overview of DOCSIS compliance configuration file, and to provision a cable modem located at customer place from a Back office serve…
In this video, viewers will be given step by step instructions on adjusting mouse, pointer and cursor visibility in Microsoft Windows 10. The video seeks to educate those who are struggling with the new Windows 10 Graphical User Interface. Change Cu…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question