16:53
@ArcanisGK507 Are you the Sophos firewall or network admin? Do you have firewall DENY rules set to log so you can look over the log. I would send some request and look over the logs. Try to get the public IP address of the URLs you are calling and search those
If you can enabled some form of SOAP advanced/debug logging, I would google and figure out how to do that and look over those logs.
If you have advanced UTM/IPS enabled on Sophos, see if there is something that needs opened for SOAP or perhaps XML there.
If you are using the same PHP SOAP client 100% inside and outside the network, then it has to be somethign network related I'd think
And Yes, that document is not very good or give any good examples that I saw but if you have it working 100% off the network, and all factors are the same otherwise (e.g. PHP versions, etc.) then I'd think that means the code is fine
If you could get the client in the office onto Internet not going through Sophos at least even temporarily, that would be a good thing to test as well.
Or if you have a laptop and can run it going through the office Internet through Sophos and also off the network getting the same results with error in office and works outside office, that too would indicate network and potentially Sophos
If you are using HTTP Proxy or filter rule in Sophos, see if there is a way to give it an exception list to skate through those unimpacted. I will do some more googling too.
@ArcanisGK507 Depending on your Sophos features, could be app control, web control, UTM features, proxies, filters, etc. Bypassing FW and testing, enabling verbose logs and creating them to inspect, and process of elimination to narrow down is the only way I would go about it. It might be FW so I probably would put focus there and try to find some logs showing a URL, an internal IP of the client machine, or the external/public IP of the URL showing it blocked
something then figure out how to allow.
If you call Sophos support, ensure you understand your features, and ask them how to enable logging for DENY/blocked rules. Ask them too if there is anything common with any features blocking SOAP or XML requests via HTTP. Ask them where they'd suggest you start for troubleshooting to rule the FW out.