This article provides an example on how to configure SRX to connect UTM Anti Virus Sophos Engine server via a Web Proxy Server

This article provides an example on how to configure SRX to connect UTM Anti Virus Sophos Engine server via a Web Proxy Server

Starting in Junos OS Release 23.1R1, Content Security supports the new antivirus Sophos Live Protection version 2.0. The new version of Sophos antivirus uses an HTTPS connection for the device-to-server communication. For the HTTPS connection, you must create an SSL initiation profile and add the profile to the default configuration of the Sophos engine.

Starting in Junos OS Release 24.4R1, we introduce Web proxy support for Content Security Sophos 2.0 antivirus. In addition, we introduce the file reputation groups based on the file reputation value to control the traffic and provide more control over security.

Therefore, in order to connect to Sophos server from SRX via a Web Proxy server, the following configurations are mandatory: 

• Connection to the server through a revenue interface other than fxp0 (refer to KB98908 [juniper.net])
• SSL initiation profile for HTTPs connection 
• SSL proxy file to decrypt HTTPs traffic from client 
• SSL proxy file to route the Sophos connection from SRX to Web Proxy server

Steps to specify the Web Proxy server for Sophos server: 

1. Create an SSL initiation profile
2. Attach the SSL initiation profile to Sophos default configuration:
   [edit]
   user@host# set security utm default-configuration anti-virus sophos-engine server ssl-profile ssl-profile-name
3. Configure the proxy profile:
   [edit]
   user@host# set services proxy profile proxy-profile-name protocol http host host-name
   user@host# set services proxy profile proxy-profile-name protocol http port port-number
4. Attach the Web proxy profile to the Sophos default configuration:
   [edit]
   user@host# set security utm default-configuration anti-virus sophos-engine server proxy-profile proxy-profile-name

2025-12-09 Article created

Sophos Antivirus Protection | Junos OS | Juniper Networks

https://www.juniper.net/documentation/us/en/software/junos/utm/topics/topic-map/security-sophos-antivirus-protection-overview.html#id_gb4_zv2_vcc

https://supportportal.juniper.net/s/article/JUNOS-234R2-S49Sophos-Antivirus-not-running-using-FXP-interface