Azure MFA with Sophos XG Firewall

Late reply but for anyone wondering this you have to create rule for firewall initiated traffic to pass trough VPN tunnel.

Same as if you want to use certificate based WLAN with remote radius server.

Instructions how to do this are described here: https://community.sophos.com/kb/en-us/123336

- Kimmo

Due fact that XG is missing RADIUS timeout setting it is currently impossible to use Azure MFA

V18 includes the radius timeout setting.

I haven't been able to get RADIUS working with the timeout feature in our v18 test box. We're not using Azure but could possibly switch to that if it works. Please update this thread if you have any luck!

Will test with Azure MFA once I have time to set up box with v18 FW.

Any update of this thread? I am also interested to know if XG can work with Azure MFA. Technically there should be no barriers to use it.

Thanks

Hi,

Sorry for late reply. Yes it is working, currently using Network Policy Server Azure MFA extension with v18.

Can post screenshots of settings if still needed.

Kimmo,

Please share the steps or the configuration so users can benefit.

Thanks

Made a blog post about it: https://rieskaniemi.com/azure-mfa-with-sophos-xg-firewall/