This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XGS116 integration with Azure AD

I need to be able to integrate the XGS116 with Azure AD for web browsing so that active users/connections shows the correct username as opposed to N/A

I've currently set it to "Clientless" and added an IP address range so that browsing is attributed to a laptop but need to do it against username

Any help on this would be greatly appreciated.

We are fully cloud-based for AD

This thread was automatically locked due to age.

Top Replies

LuCar Toni over 2 years ago in reply to Steve Simpson +1 suggested

Azure AD limits the capabilities on the system to authenticate against Azure AD in the current state. With Intercept X, we could read the information of the user and sync this with azure AD. Without…

Parents

0 LuCar Toni over 2 years ago

Do you have Sophos Intercept X on the Clients?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Steve Simpson over 2 years ago in reply to LuCar Toni

No we don't....All laptops authenticate with AAD and route network traffic through the firewall
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 2 years ago in reply to Steve Simpson

Azure AD limits the capabilities on the system to authenticate against Azure AD in the current state. With Intercept X, we could read the information of the user and sync this with azure AD.

Without Intercept X, its not possible without a stretch.

You could do WPA2 Radius Authentication.

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel
0 Steve Simpson over 2 years ago in reply to LuCar Toni

I have Sophos Central linked to AAD and the sync is working but unfortunately I can't find a link between Sophos Central sync and XGS
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 2 years ago in reply to Steve Simpson

The issue is the mapping from user to IP. This is not possible.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 LuCar Toni over 2 years ago in reply to Steve Simpson

The issue is the mapping from user to IP. This is not possible.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Steve Simpson over 2 years ago in reply to LuCar Toni

We use Kaspersky traditionally as endpoint but we've got can roll out Intercept X to our HQ users which are the ones using our XG FW.....Is it easy to setup Intercept X and XG?
Cancel
Vote Up 0 Vote Down

Cancel
0 Jason Bristow over 2 years ago in reply to Steve Simpson

There’s nothing easier. I would roll it out and take advantage of the synchronized security between the XG and Intercept X.
Cancel
Vote Up 0 Vote Down

Cancel