2FA/OTP not workin neither on Webportal nor on IPSEC VPN

Hi jjuergenn,

Configuration for OTP on XG is in the document link : http://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContents/ConfiguringTwoFactorAuthentication.html

Could you please share access_server.logs in debug? 

• Follow this KB Article to SSH to XG : Sophos XG Firewall: How to SSH to the firewall using PuTTY utility
• Use this command from Advance Shell to put the service in debug : service access_server:debug -ds nosync

SFVUNL_SO01_SFOS 18.0.0 GA-Build339# service access_server:debug -ds nosync
200 OK

• How to check status of the service:

SFVUNL_SO01_SFOS 18.0.0 GA-Build339# service -S | grep access
supportaccess UNTOUCHED
access_server RUNNING,DEBUG
SFVUNL_SO01_SFOS 18.0.0 GA-Build339#

Once you have access_server service in debug, please try to replicate the issue and PM me the access_server.log and user name. 

Thanks,

Hi jjuergenn,

Thank you for the providing access_server logs in debug. 

Logs indicates an issue with the OTP token. 

I would suggest you to try to delete the user from the OTP configuration and reconfigure OTP for the user.

Follow the link on how to obtain a token and passcodes

http://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContents/ConfiguringTwoFactorAuthentication.html

 Thanks,