This article applies to Sophos Home for macOS AND Windows

Sophos Home requires access to several servers for proper communication and functionality. This allows the program to process policies, requests, and updates, among other things. 

Most home users will not need to worry about additional access to the above mentioned. However, customers running dedicated Firewalls/proxies (other than Windows/Mac native ones) may need to allow the below listed domains, as necessary : 

If your firewall supports wildcard domains

If your proxy or firewall supports the use of wildcards, these listed addresses should be added to the allow list:

If your firewall does not support wildcard domains 

If your proxy or firewall does not support the use of wildcards, the listed addresses should be added manually to the allow list.

First, identify the server address that the Sophos Management Communication System uses to securely communicate with Sophos Central:

Open the file SophosHomeCloudInstaller_XXXXXXXX_XXXXXX.log located in the %temp% folder

Search within the file for Lines that start with:
Model::server value changed to:
Note: This should include a URL that looks similar to
mcs2-cloudstation-us-east-1.prod.hydra.sophos.com

Add the server address and the following addresses to the allow list of the proxy server:

Additional Information

If you are still encountering problems after allowing Sophos Home through your 3rd party firewall, please refer to this article for additional ports and domains:

Domains and ports to allow - Sophos Central Admin