Unauthenticated Users Dropped In STAS: Issue: User is using STAS to authenticate users with XG firewall. User created plain firewall rule on top without ticking “Match known users” tab as shown in below image. This rule will allow all LAN and WIFI users to WAN, even if the user is not authenticated with firewall. But when some user is trying […]
Issue: I have Live Users registered both through Heartbeat and STAS. Those PCs with Heartbeat (Sophos Endpoint Intercept-X) are excluded from STAS so the two mechanisms don’t clash. I am finding that although the users appear in Live Users when they log on, they then disappear (about 10-30 minutes) even though the user is still logged on to the PC. […]
Issue: AD SSO live users are regularly loosing the authentication of its live users. Resolution-1: First ensure you have integrated and configured active directory set up correctly. You can use the following article for the same: If configuration is correct and still facing the issue, disable “HTTP challenge redirect on intranet zone” under services tab under authentication as shown below […]
Overview: Here in this article we will discuss how to integrate active directory with sophos XG firewall. Process: First we need to login to sophos XG firewall GUI and click on authentication and click on servers tab as shown in below image Now click on ADD option and fill the required details and here in the below image sample details […]
Overview: Here in this article we will discuss how to connect to SSH of the firewall using putty utility. Process: First you need to enable SSH in specific zone under administration >> device access as shown below Here in the above image, SSH is enabled under LAN zone Then open the putty utility. You can download putty utility from this […]
Issue: If sophos XG firewall configured as explicit proxy unable to authenticate with CAA. Here is the sample network diagram Troubleshooting: Before going to troubleshoot this issue, first try to confirm whether you have configured CAA correctly. You can use this article for the same First we will understand the authentication process of client authentication agent. When user is trying […]
Overview: The Client Authentication Agent (CAA) is a lightweight agent for the sole purpose of authenticating users with the XG Firewall. Here in this article we will describe process to install client authentication agent to authenticate users with sophos XG firewall. Process: Please login to the firewall and click on authentication Click on Client downloads You can click on Download […]
Issue: Some users in STAS live users tab not showing up in sophos XG current activities >> live users tab Troubleshooting: When configuring AD authentication server in sophos XG firewall, if user enters invalid credentials then server and firewall cannot communicate with each other. If user surfing quota is completely used, then user will not be showed under sophos XG […]
Overview: Here in this article we will learn how to view live users in STAS client. Process: Here is the working process of STAS in sophos XG User will login to work station and authentication request will be sent to domain controller where STAS is installed. To view the live users in STAS client, launch STAS application click on advanced […]
Here in this article we will learn group membership working methodology when user authenticate with the firewall. Before going through this article, please look into this article and understand how to imports the groups from active directory https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContent/AuthenticationConfigureActiveDirectory.html Issue: Once the user authenticates with user portal, user is falling under open group instead of his own group under active directory. […]