Sophos XGS Delete a group imported from the AD

RE: Sophos XGS Delete a group imported from the AD

admin_idl — Tue, 19 Nov 2024 15:13:59 GMT

Thank you for your feedback. That's okay, but it sounds very complicated.

RE: Sophos XGS Delete a group imported from the AD

LHerzog — Tue, 19 Nov 2024 09:31:22 GMT

I've seen that yesterday on our firewall. "Users exist in the group" for AD imported groups.

Check who it is and then either delete the users on the firewall (keep MFA in mind) or change their group membership in AD, then all users would need to re-login to XGS so the firewall can check, that they do not belong to the group anymore. Thats the only way SFOS will remove them from the group (complicated)

Im my case it was only one user, I deleted the user then deleted the group. It was not used in configurations.

RE: Sophos XGS Delete a group imported from the AD

Vivek Jagad — Mon, 18 Nov 2024 09:28:04 GMT

Seems like the user is already in some kind of configuration.

Every user gets a group as primary group in XG. So check the group name of the user and check, whether you use this group already in the modules (like WAF, SSL VPN etc.)

REF - Support for Active Directory group memberships - Sophos Firewall

RE: Sophos XGS Delete a group imported from the AD

admin_idl — Mon, 18 Nov 2024 09:24:02 GMT

It is about a group from the Active Directory which is to be deleted and this message appears when deleting it

RE: Sophos XGS Delete a group imported from the AD

Vivek Jagad — Mon, 18 Nov 2024 09:05:25 GMT

Hi admin_idl ,

Thank you for reaching out to the community, User Group not visible on UI ?
Check user-based (match user) is not currently turned on for that rule.