This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Radius SSO for wired devices

Hello everyone,

I would like to set up the firewall for radius sso.

My radius server and switches are configured correct as i can get network access and vlan assignmet and failover based on my policies.

My problem is the captive portal as the firewall does not know who a user is.

Is it any documentation on how to set up the firewall and what is needed on the radius server?

Kind regards,

Dragos

This thread was automatically locked due to age.

Parents

0 Vivek Jagad 6 months ago

Hello Dragos Avram1 ,

Thank you for reaching out to the community, the following doc should help: Configure RADIUS authentication.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Dragos Avram1 6 months ago in reply to Vivek Jagad

Hi Vivek Jagad ,

Thanks for your reply.

I had a look at that article, but it does not work.

Perhaps i was not very clear, but let me try explaining my goal again:

A user is authenticated on the network by radius.

I do not want the captive portal to appear. I want the firewall to get the user info from radius.

Is it possible? have you successfully done this?

Thanks,

Dragos
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 6 months ago in reply to Dragos Avram1

Hey Dragos Avram1 , in that case you can simply disable the captive portal service on that particular zone as mentioned in the screenshot below, Administration > Device access:

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Vivek Jagad 6 months ago in reply to Dragos Avram1

Hey Dragos Avram1 , in that case you can simply disable the captive portal service on that particular zone as mentioned in the screenshot below, Administration > Device access:

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Dragos Avram1 4 months ago in reply to Vivek Jagad

i still have not given up on this.

i managed to understand what is needed but my nps logs dont show radius attribute 8
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 4 months ago in reply to Dragos Avram1

which windows server are you using ?
Windows Server 2008 R2 or later.
Radius authentication on Windows Server 2016.
RADIUS for Enterprise Wireless Authentication with Windows Server 2012.
Radius authentication on Windows Server 2008 R2.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel