Firewall Settings for Splashtop Remote - Sophos Endpoint Security and Control
posted this on February 08, 2012 20:57
1. Before starting this setup, it is necessary to first terminate the Splashtop Streamer (if it is currently running). To do this, right-click on the Splashtop Streamer icon in the system tray, then select Exit on the menu, as shown below.
2. Invoke Sophos Endpoint Security and Control. Select the Configure firewall function as shown below.
3. The “Firewall configuration” window will appear. Click the Configure... button.
4. The “Primary location” window will display. Click the Applications tab as indicated below.
5. In the Applications tab, click the Add... button.
6. The “Open” dialog will appear. Browse to the “C:\Program Files\Splashtop\Splashtop Remote\Server” folder. Click the DataProxy application icon as shown below, then click the Open button.
7. Repeat Steps 5 and 6 to add the applications listed below into the Applications list in the “Primary location” window. Then, click the OK button.
inputserv.exe (only necessary for Splashtop Remote Touchpad)
SRLogin.exe (no longer exists in ver. 2.x and later)
8. You will be returned to the “Firewall configuration” window. Click the Apply button.
9. The “Sophos Client Firewall” dialog box will appear, requiring you to confirm. Click the Yes button.
10. You will be returned to the “Firewall configuration” window. Click the OK button.
11. The remaining steps below are concerned with re-launching Splashtop Streamer, to execute all related files; then Sophos has the chance to confirm them with the user. This behavior is rather unique, compared to other firewall products. So, launch Sophos Endpoint Security and Control from the Start menu again.
12. The “Sophos Endpoint Security and Control” window will open when Splashtop Streamer is launched. The first program, SRSERVICE.EXE, will be detected and executed by Sophos. As shown in the example below, a window with a path like C:\PROGRAM FILES\SPLASHTOP\S...\SRSERVICE.EXE will be shown.
Select the Allow all hidden processes launched by SRSERVICE to access the network option, then click the OK button.
13. This step is important, but is sometimes easily overlooked. You have to start the first connection with your client device (tablet/phone) in the same local network. In this case, a scenario similar to that of Step 12 above should be applied. Another program SRSERVER.EXE will be detected by Sophos when connected. The “Sophos Endpoint Security and Control” window will pop up again, with a path like: C:\PROGRAM FILES\SPLASHTOP\S...\SRSERVER.EXE
Select the Allow all hidden processes launched by SRSERVER to access the network option, then click the OK button.
14. The last file, “DATAPROXY.EXE,” will only be detected by Sophos when in a remote-connection status. Therefore, please enable Splashtop’s “Internet Discovery” feature with a gmail account logged in first, on both tablet/phone and computer. You can click on the link below to view a topic that describes more details about enabling this feature.
15. The next step would be more difficult if you don’t have 3G, or another person to help you (beside your computer) when you are in another WiFi network doing the remote connection. At any rate, this is just a one time effort, so please do a remote connection to give Sophos the chance to detect “DATAPROXY.EXE” and it will appear in a similar window as shown below.
Click the Allow all hidden processes launched by DATAPROXY to access the network button, then click OK. You’re done!