Live STAS users getting replaced by sophosm@domain.local

Question

We are using a Sophos XG310 (SFOS 17.5.9 MR-9)

As seen in the above image our users are being replaced by our management account which is sophosm@domain.local whenever this happens the users has to sign in again through the captive portal.

Jaydeep · Answer

Hi Willem van Zyl 
 This happens when you have a service that starts after the user logs in with this management account. Try to put this account in Login User Exclusion List in STAS. You may look into this older community post for the same issue https://community.sophos.com/products/xg-firewall/f/authentication/104101/stas---administrator-live-user . Hope this helps.