Feature and severity: I have a bug with the Xstream authentication showing the Sophos Captive portal to all Chrome users severity is medium.
Summary: Since updating SG210 to v 18 EAP 2 we now get a default Sophos captive portal when endpoints are using Chrome and opening up new web pages.
Observed behavior: Users log on to their end points, open up Chrome and browse to a web page. The default xg210 captive portal is displayed asking for authentication. Firewall is set to Kerberos & NTLM for web authentication and STAS has two collectors setup with two servers. The captive portal did not show up before the firewall upgrade to v18 EAP2. (Chrome version: v78.0.3904.108 (64 bit))
Desired: For end users to log in, open up Chrome and browse without further authentication via a captive portal.
Reproduce it: We have managed to reproduce this for all standard users, but are not seeing this for admin users of Sophos.
Supporting logs: