Changing the communication port between a SafeGuard Enterprise Client and Server

  • Article ID: 108648
  • Updated: 04 Dec 2015

How to change the communication port between SafeGuard Client and SafeGuard Enterprise Server.

Known to apply to the following Sophos product(s) and version(s)
SafeGuard Enterprise Server
SafeGuard Device Encryption

Operating systems
All supported operating systems

What To Do

The SafeGuard Enterprise Server is registered in the SafeGuard Enterprise database (e.g. as SGMSRV). By default the SafeGuard Enterprise Server listens on port 80 for Sophos transport encryption and on port 443 for SSL (The default and recommended setting).

To customize the port, the following changes have to be made:

  1. Reconfigure the SGNSRV website on the IIS Server to a different port (e.g. 8080).
    Caution: Clients which are already connected to that Server will no longer be able to communicate.
  2. Register the SafeGuard Enterprise Server again in the SafeGuard Management Center, using the same machine certificate. Add the port information after the Server name.
  3. Create a new Client Configuration Package pointing to that server and deploy it to the SafeGuard Clients.


    This KBA must not be applied when OS X clients are managed in this environment. The resulting client configuration file would not work with OS X clients.

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent