Browse By Tags

  • Proxy in standard-mode ask for Authentication while "surfing", if user uses multiple MS-Teams Tenants.

    Hi all, We have some users who are repeatedly asked for proxy authentication. Only users use multiple MS-teams tenants see this problem. (We don't know users with activity within multiple ms-tenants without this problem) We use AD-SSON and users are…
  • Authenticate XG230 with ZimbraLDAP - Test connection failed due to incorrect credential

    im Trying to Authenticate Sophos XH230 with Zimbra LDAP, and i can't it always says "Test connection failed due to incorrect credential". help
  • Change the name of the authentication server

    Hello, can I change the display name of the authentication server without creating a new server ? I can change everything except the display name. The option is grayed out. Thx
  • Delete Bulk user from group

    I need API script to remove bulk user from the group.
  • no live user are showing || user xxxx failed to login to firewall through AD.Local authentication Mechanism from 172.16.16.17 because wrong credentials.

    Hi, i implemented Stas in sophos and AD wmi pooling working also live user are showing in stas agent software but issue is sophos current activities no live user are showing when i checked in LOGS-authentication-user xxxx failed to login to firewall…
  • Users not getting matched to to AD Groups and falling in Default Group

    Hi, I have been using Sophos 18.0.1 with AD authentication and its working fine. I have recently installed Sophos SFOS 19.5.1 MR-1-Build278 for testing. Initially it was having NTLM authentication issue, which i sorted out by deleting the nasm and…
  • logon type 10 - stas live users

    Hi all I don't know the type logon type is 10 !!? name\domain\ip client\ hour & date\logon type Best regards
  • Sophos Firewall Authentication to server in Azure across VPN Tunnel

    I recently worked through a problem where an on premise firewall was unable to authenticate Remote Access VPN users with Active Directory as the server is hosted in Azure through a VPN (Active Directory is used instead of AAD as it's less expensive to…
  • Sophos Hotspot Captive Portal - will it be extended?

    Hello, we are missing some features since our migration to Sophos. We put these as ideas in the portal which is now gone. Now nowbody knows what is suggested and there is no feedback, too. So as a question to the insiders: will the hotspot function…
  • invalid logins - public IP blocked for 5 minutes - can login VPN anyway. why?

    Hello, today we had a strange situation on SFOS 19.5.1: a VPN user logged in with wrong credentials several times. In the XG log this was shown as VPN auth failure in log as expected. SFOS does not log the client IP for failed logins anymore,…
  • STAS ||| virtual implement.

    Hi, its possible to implement STAS in EVNG virtual device with 30 days License. Need to test virtual before we implement in production any command to check if a user login or logout because its Ip to user mapping. Thanks satya
  • client authentication agent

    Client Authentication Agent is not working in our office, i have upgraded all computers to Windows 11 Error it says You are not allowed to log in from this machine Kindly help us on this please Kumaresh St.Joseph's College of Commerce 9…
  • New QR Code

    How do I generate a new QR Code for the users we have users who have been issued with a new Iphones , they have wiped out the old phones with the Sophos Authenticator App as a result , they cannot setup their Account to the new Phone because they…
  • Connect Client Provisioning Files with MFA enabled

    I setup a connect client with a provisioning file. Had Authentication to an AD server setup. When the user connects for their first time while using a provisioning file, it works beautifully. Now, enter MFA. Because most places want some extra security…
  • MFA on web authentication

    I am using MFA for certain users, using it in Web Admin Console, SSL VPN and User portal in which there is no way to disable it. However I would not want to require MFA for web authentication, for example, an unknown user is directed to the web portal…
  • WMI BLOCKED / STAS

    Dear colleagues! We are having problems connecting via STAS on newer versions of Windows. In Sophos Transparent Authentication Suite in WMI VERIFICATION, the workstation shows access denied. We even used the key below but it doesn't work anymore. Path…
  • STAS logon type is 3 ??

    Hi all, FW XG v (SFOS 19.0.1 MR-1-Build365) I just have 2 DCs with stas installed. I think stas authentication is working as you like in the capture, logon type is 3 !! But logon type 3 as defined: The STAS agent runs on a member server and…
  • AD SSO Authentication and site-to-site VPN connection

    Hello all, We have a problem with one of our software applications. We are using SFOS 19.5.0 GA-Build197. The software needs to connect to a remote server which is only available via site-to-site VPN. The connection is configured and is working (green…
  • AD Authentication with STAS working but User firewall rules does not evaluate as authenticated

    I have two Domain controlers and on both installed STAS for twho Sophos XG HW appliance in HA active-pasive. After upgrade from 18.5.4 to 19.5.1 i have problem evaluating user rules. After upgrade i reinstall STAS to newwr vrsion on both DCs. I need reeneter…
  • Sophos XGS STAS IPv6 support

    Hi there, are there any plans that STAS will support IPv6? We are using IPv6 and STAS agent is not able to work if user is using IPv6. Besr regards, Oldrich
  • ZTNA SMB Authentication with on-premise file server

    Hi I am hoping someone may have come across or can point me in the right direction. We have configured ZTNA and have been testing with web based SaaS apps and access to SMB shares to a file server on premise. We have started to experience some issues…
  • Problem with Apple devices and RADUIS

    Hi everyone, I have a big problem with wifi RADIUS and Apple devices. I am using SG330 firewall and APX530 access points, all with the newest Firmware. The problem is this: All of our Apple devices (iPads and iPhones) looses their connection…
  • Change OTP Name for authenticator apps

    Hello Sophos and everyone else, we are in the progress from switching all of the UTMs to XGSs at our customers. Unfortunately we are facing a little problem with the OTP implementation at XGS. At the (Google) Authenticator App we see the following…
  • Bug: SSH keys disappear when Admin has 2-Factor authentication enabled

    There may be a bug in SFOS regarding SSH keys. we noticed on 2 different SFOS firewalls, one XG430 (SFOS 19.0.1 MR-1-Build365) and one XGS136 (SFOS 19.5.1 MR-1-Build278) that SSH Keys you add here: after you have enabled Multi Factor Authentication…
  • Remote users, Azure AD and always on VPN

    Hi, For a project I'm working with it is required to allow remote users with company provided laptops. This laptops are intended for business purposes only and should start a vpn to the in-house XGS firewall and block any direct connection to Internet…