Import

Hi Kayode Odeyinka 

You can import the group in the XG firewall, the user will create automatically as they were authenticated with the firewall. Please refer the articles

https://community.sophos.com/kb/en-us/123158

https://community.sophos.com/kb/en-us/123161

Hi Keyur,

Thanks for your response.

I tested with one user and it displayed the user as as a web client user but it does not display it as STAS user.

Since STAS shows just one live user which is the AD server itself and the XG also shows the AD server as the only STAS user.

It means there is an issue with between the the AD and STAS.

or what do you think?

And am not still able to import AD groups using the wizard, but the connection between the AD and the XG is successful.

So what do you suggest.

Warm regards,

Kayode.

Hi Keyur,

Thanks for your response.

I tested with one user and it displayed the user as as a web client user but it does not display it as STAS user.

Since STAS shows just one live user which is the AD server itself and the XG also shows the AD server as the only STAS user.

It means there is an issue with between the the AD and STAS.

or what do you think?

And am not still able to import AD groups using the wizard, but the connection between the AD and the XG is successful.

So what do you suggest.

Warm regards,

Kayode.

Hi Kayode Odeyinka 

Did you follow the same steps to import groups shown in the article?

Please also bypass the port 6060, 6677, 389 from Ad server Anti-Virus and Windows Firewall for inbound and outbound connection and check

Please also select AD server in the authentication tab before local

Hi Keyur,

I have done that, but it still the same.

However i noticed that it shows the AD as the only STAS live users and others as Web client users.

i disconnected the live users and then immediately it changed the STAS Ad user to another person presently logged into the domain server.

It means only the AD is authenticating the Users are not authenticating through STAS.

What do you think, could a certain port be blocked or what?

Please assist.

Wam regards.

Hi Kayode Odeyinka 

We required to check the configuration and other information and logs, I would suggest you contact technical support and open a support request to investigate the issue further.

Hi Kayode Odeyinka 

It appears that you have not followed the KBA about setting up STAS.

You need to add any and all service accounts used on the network to the login/logoff detection list.  You will also need to add the DCs IPs to the logon/logoff exclusion list.

This is the reason why you are only seeing 1 account on STAS and thats from the DC.

I would suggest you read through the whole article first and then start setting up.

Hi KingChris,

Thanks for your response.

Please do you mean adding the network to the "Specify the network to be monitored" box as shown below:

and please kindly share me a link for the complete configuration of STAS within you reach.

Your response is important to me.

Warm regards,

Kayode.

Hi Kayode Odeyinka 

Please review this KBA:  https://community.sophos.com/kb/en-us/123154

At the bottom of the article is a note about adding service accounts (including the account that STAS users on the DC) to the exclusion list.

I also suggest you read this KBA:  https://community.sophos.com/kb/en-us/123156.  This KBA is the same as the first 1 except this details a single AD controller.  However at the end of the KBA, it has a long list of KBAs that are suggested reads for STAS.

Thanks!