This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to integrate XG SSL VPN with Azure AD

lferrara over 4 years ago

Can you create a KB or a video on How to Integrate XG SSL VPN with Azure AD?

The maximum is Azure AD MFA with v18.

Thanks

This thread was automatically locked due to age.

Parents

0 FloSupport over 4 years ago

Hi

Thanks for sharing your suggestion!

Let me follow up with the team. I'll reply back when I have an update.

Regards,

Florentino
Director, Global Community & Digital Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the 'Verify Answer' button.

The Award-winning Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to FloSupport

Hi Luk,

Azure AD is not supported in XG right now.

Background is, the LDAP queries of Azure AD are not quite the standard to LDAP of AD.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago in reply to LuCar Toni

LuCar Toni,

Natively is not supported but...I would like to know if by using XG as Radius client can do the trick like competition do.

For example:

https://forum.fortinet.com/tm.aspx?m=163835

https://docs.microsoft.com/en-ca/azure/active-directory/authentication/howto-mfa-nps-extension-vpn

https://www.reddit.com/r/fortinet/comments/e8jia8/fortigate_ssl_vpn_windows_radius_and_azure_mfa_w/

Sorry to mention the competition but some workarounds can work if technically is possible. So, could you guys investigate and check if with XG is possible?

Since I already received a tender where XG can fit and I have other customers moving AD completely to Azure (I do not agree with this approach at all!) but for these customers, XG is automatically discarded.

Hope you understand and can investigate

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to lferrara

I do not have the License in Azure to integrate this.

So maybe somebody in the Community can test this with the proper enterprise AD License.

If Azure AD uses Standards in Radius... Why not? Should work. If they uses different Protocols, could not work.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago in reply to LuCar Toni

LuCar Toni said:

I do not have the License in Azure to integrate this.

Thanks LuCar Toni. I have the same issue. I could ask to some customers but it is not feasible and it requires time.

If you can push and investigate from your side, it is a nice feature that can show how XG integrates with Azure MFA.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 lferrara over 4 years ago in reply to LuCar Toni

LuCar Toni said:

I do not have the License in Azure to integrate this.

Thanks LuCar Toni. I have the same issue. I could ask to some customers but it is not feasible and it requires time.

If you can push and investigate from your side, it is a nice feature that can show how XG integrates with Azure MFA.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data