Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall

Discussions XGS3300 MFA for SSL VPN

Sophos Firewall requires membership for participation - click to join

Thread Info

State Verified Answer
Locked Locked
Replies 2 replies
Subscribers 40 subscribers
Views 1257 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XGS3300 MFA for SSL VPN

MM the Admin 3 months ago

Hey,

is there a possibility to set up MFA for SSL VPN on the XGS 3300?

Maybe even a SAML authentication with the MS authenticator?

Can't find any infos on that in the documentation, neither can i find an optiuon the the admin panel.

Can anyone help out?

This thread was automatically locked due to age.

Top Replies

LuCar Toni 3 months ago +2 verified

SFOS only supports Entra ID via Radius. Sophos Connect (SSLVPN) and native AzureAD (Entra) Here is a workaround for the time being: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/122575…

Parents

+1 LuCar Toni 3 months ago

SFOS only supports Entra ID via Radius. Sophos Connect (SSLVPN) and native AzureAD (Entra)
Here is a workaround for the time being: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/122575/sophos-firewall-using-azure-mfa-for-ssl-vpn-and-user-portal

__________________________________________________________________________________________________________________
Cancel
Vote Up +2 Vote Down

Cancel

Reply

+1 LuCar Toni 3 months ago

SFOS only supports Entra ID via Radius. Sophos Connect (SSLVPN) and native AzureAD (Entra)
Here is a workaround for the time being: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/122575/sophos-firewall-using-azure-mfa-for-ssl-vpn-and-user-portal

__________________________________________________________________________________________________________________
Cancel
Vote Up +2 Vote Down

Cancel

Children

0 MM the Admin 3 months ago in reply to LuCar Toni

Hey, thanks for the answer.

We had a NPS with the entra connector earlioer but since we currently do not have a sync between our AD and m365 we can not use this anymore.
So we're screwed here?

Is there any other possibility of using MFA for SSL VPN?
Cancel
Vote Up 0 Vote Down

Cancel