Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall

Discussions 2FA/OTP not workin neither on Webportal nor on IPSEC VPN

Sophos Firewall requires membership for participation - click to join

Thread Info

State Verified Answer
+1 person also asked this people also asked this
Locked Locked
Replies 2 replies
Subscribers 40 subscribers
Views 1335 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

2FA/OTP not workin neither on Webportal nor on IPSEC VPN

jjuergenn over 4 years ago

Hi,

I come from SOPhos UTM an have problems with 2FA/OTP authentication on Sophos XP.

Following setup

- SFOS 18.0.0 GA-Build339
- acitive directory user
AD authentication is working fine
- OTP configuration

- OTP Status for user on

Configration looks pretty simple however it doesn't work neither for userportal nor for IPSEC VPN.

Most probably I miss a configuration. Any ideas?

Thanks,

Juergen

This thread was automatically locked due to age.

Parents

0 FormerMember over 4 years ago
Hi jjuergenn,

Configuration for OTP on XG is in the document link : http://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContents/ConfiguringTwoFactorAuthentication.html

Could you please share access_server.logs in debug?

Follow this KB Article to SSH to XG : Sophos XG Firewall: How to SSH to the firewall using PuTTY utility

Use this command from Advance Shell to put the service in debug : service access_server:debug -ds nosync

SFVUNL_SO01_SFOS 18.0.0 GA-Build339# service access_server:debug -ds nosync
200 OK

How to check status of the service:

SFVUNL_SO01_SFOS 18.0.0 GA-Build339# service -S | grep access
supportaccess UNTOUCHED
access_server RUNNING,DEBUG
SFVUNL_SO01_SFOS 18.0.0 GA-Build339#

Once you have access_server service in debug, please try to replicate the issue and PM me the access_server.log and user name.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
+2 FormerMember over 4 years ago in reply to FormerMember

Hi jjuergenn,

Thank you for the providing access_server logs in debug.

Logs indicates an issue with the OTP token.

I would suggest you to try to delete the user from the OTP configuration and reconfigure OTP for the user.

Follow the link on how to obtain a token and passcodes

http://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContents/ConfiguringTwoFactorAuthentication.html

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel

Reply

+2 FormerMember over 4 years ago in reply to FormerMember

Hi jjuergenn,

Thank you for the providing access_server logs in debug.

Logs indicates an issue with the OTP token.

I would suggest you to try to delete the user from the OTP configuration and reconfigure OTP for the user.

Follow the link on how to obtain a token and passcodes

http://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContents/ConfiguringTwoFactorAuthentication.html

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data