Prepare EAS proxy for migration

If you’re using the Sophos Mobile EAS proxy, we recommend that you temporarily turn off mail filtering until you’ve configured the standalone EAS proxy for Sophos Central. Otherwise, devices that are already migrated would be blocked.

To turn off mail filtering, follow the steps for your EAS proxy type (internal, standalone, or standalone in PowerShell mode).

Turn off mail filtering for the internal EAS proxy

You must start the migration assistant described in Run the migration assistant before you can perform the following steps. The Allow all devices setting is only then available.

Do as follows:

1. Sign in to Sophos Mobile Admin as a super administrator.
2. On the menu sidebar, under SETTINGS, click Setup > Sophos setup, and then click the EAS proxy tab.
3. Under Internal, select Allow all devices.
4. Click Save.

Turn off mail filtering for the standalone EAS proxy in proxy mode

Do as follows:

1. Open the EAS proxy’s configuration file, easproxy.conf.xml, in a text editor.

   The file is located in the installation folder. By default, this is C:\Program Files (x86)\Sophos\Sophos Mobile EAS Proxy\.

2. Change all occurrences of the text verificationEnabled="true" to verificationEnabled="false".

   There’s one occurrence for each EAS proxy instance that you’ve set up.

   

3. Save the file.

4. In Windows, open Services and restart the EASProxy service.

   

Turn off mail filtering for the standalone EAS proxy in PowerShell mode

Do as follows:

1. Connect to Exchange Online PowerShell or, if you have an Exchange server, open the Exchange Management Shell.

   See the Microsoft documents Connect to Exchange Online PowerShell and Open the Exchange Management Shell.

2. Run the following command:

   Get-ActiveSyncOrganizationSettings
   

   Record the DefaultAccessLevel value. You need this value when you turn on mail filtering again.

3. Run the following command:

   Set-ActiveSyncOrganizationSettings -DefaultAccessLevel allow