This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

User MAC Binding not worked

We try to bind the user MAC with client based authentication mechanisms.

https://support.sophos.com/support/s/article/KB-000035643?language=en_US

But the user can still login on ever machine.

What works is a release via the MAC-Host and a Firewall Rule for devices. But we want to bind the devices with the user authentications.

XG330 (SFOS 18.0.4 MR-4)

We would be very grateful for suggestions and help.

This thread was automatically locked due to age.

Top Replies

Patrick Fleischer over 3 years ago in reply to Vishal_R +2

Ok thanks for help @ all have a nice day.

Parents

0 FormerMember over 3 years ago

Hi Patrick Fleischer,

Thank you for reaching out to Sophos Community.

Which authentication method are you using?

Also, try changing 'Login restriction' in the user profile to Any node.
Cancel
Vote Up +1 Vote Down

Cancel
0 Patrick Fleischer over 3 years ago in reply to FormerMember
Hi Yash,

the registration restriction is already on all nodes. The login method is user-based via Capative Portal.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vishal_R over 3 years ago in reply to Patrick Fleischer

Hi Patrick Fleischer MAC Binding option for SSL VPN client and Captive Portal is not supported. The KBA which you have used for reference covers the same information.

You may required to go for CAA ( Client authentication agent) for MAC binding.

Sophos XG Firewall: Client Authentication Agent

support.sophos.com/.../KB-000038465

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up +1 Vote Down

Cancel
0 Patrick Fleischer over 3 years ago in reply to Vishal_R

Ok thanks for help @ all have a nice day.
Cancel
Vote Up +2 Vote Down

Cancel
0 Patrick Fleischer over 3 years ago in reply to Patrick Fleischer

I have still another question. Why does this not work without a client auth agent ? It used to work with the cyberoam. I read here in a post that this behaviur is a bug that was in the progress of being fixed. However this post is already over 5 Years old. How far is the fix ?

community.sophos.com/.../issue-bug---user-mac-binding-option-is-unable-to-bind-mac-address-in-xg-firewall
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Patrick Fleischer over 3 years ago in reply to Patrick Fleischer

I have still another question. Why does this not work without a client auth agent ? It used to work with the cyberoam. I read here in a post that this behaviur is a bug that was in the progress of being fixed. However this post is already over 5 Years old. How far is the fix ?

community.sophos.com/.../issue-bug---user-mac-binding-option-is-unable-to-bind-mac-address-in-xg-firewall
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data