• Sophos Connect MFA prompt with .ovpn files now that Sophos have broken Sophos Connect profiles

    jamesharper
    jamesharper
    Now that Sophos have effectively broken .pro configuration files with 19.5.2 by disabling the user portal WAN access after 90 days of no use, i'm looking to migrate everyone to using imported .ovpn files instead. This carries a bit more initial setup…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • STAS now working

    Dale Gregory
    Dale Gregory
    We have 2 domain controllers, DC1 with the STAS suite and DC2 with the Agent. All of a sudden random people can't log onto the internet, they aren't in active users on the firewall and STAS doesn't seem to be picking them up so they fall through the rules…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • stas

    satyabrata bastia
    satyabrata bastia
    Hi, after STAS implement if a user disconnect Ethernet and connect again without logoff and login still internet work or not every time he need to logoff and login again. Thanks satya
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Proxy in standard-mode ask for Authentication while "surfing", if user uses multiple MS-Teams Tenants.

    dirkkotte
    dirkkotte
    Hi all, We have some users who are repeatedly asked for proxy authentication. Only users use multiple MS-teams tenants see this problem. (We don't know users with activity within multiple ms-tenants without this problem) We use AD-SSON and users are…
    • over 1 year ago
    • UTM Firewall
    • General Discussion
  • Authenticate XG230 with ZimbraLDAP - Test connection failed due to incorrect credential

    Helson Victorino
    Helson Victorino
    im Trying to Authenticate Sophos XH230 with Zimbra LDAP, and i can't it always says "Test connection failed due to incorrect credential". help
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Change the name of the authentication server

    schmiegi
    schmiegi
    Hello, can I change the display name of the authentication server without creating a new server ? I can change everything except the display name. The option is grayed out. Thx
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Delete Bulk user from group

    Anuradha Kore
    Anuradha Kore
    I need API script to remove bulk user from the group.
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • no live user are showing || user xxxx failed to login to firewall through AD.Local authentication Mechanism from 172.16.16.17 because wrong credentials.

    satyabrata bastia
    satyabrata bastia
    Hi, i implemented Stas in sophos and AD wmi pooling working also live user are showing in stas agent software but issue is sophos current activities no live user are showing when i checked in LOGS-authentication-user xxxx failed to login to firewall…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Users not getting matched to to AD Groups and falling in Default Group

    Moeed Aziz
    Moeed Aziz
    Hi, I have been using Sophos 18.0.1 with AD authentication and its working fine. I have recently installed Sophos SFOS 19.5.1 MR-1-Build278 for testing. Initially it was having NTLM authentication issue, which i sorted out by deleting the nasm and…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • logon type 10 - stas live users

    Fotit
    Fotit
    Hi all I don't know the type logon type is 10 !!? name\domain\ip client\ hour & date\logon type Best regards
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Sophos Firewall Authentication to server in Azure across VPN Tunnel

    DavidSain
    DavidSain
    I recently worked through a problem where an on premise firewall was unable to authenticate Remote Access VPN users with Active Directory as the server is hosted in Azure through a VPN (Active Directory is used instead of AAD as it's less expensive to…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Sophos Hotspot Captive Portal - will it be extended?

    K-M
    K-M
    Hello, we are missing some features since our migration to Sophos. We put these as ideas in the portal which is now gone. Now nowbody knows what is suggested and there is no feedback, too. So as a question to the insiders: will the hotspot function…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • invalid logins - public IP blocked for 5 minutes - can login VPN anyway. why?

    LHerzog
    LHerzog
    Hello, today we had a strange situation on SFOS 19.5.1: a VPN user logged in with wrong credentials several times. In the XG log this was shown as VPN auth failure in log as expected. SFOS does not log the client IP for failed logins anymore,…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • STAS ||| virtual implement.

    satyabrata bastia
    satyabrata bastia
    Hi, its possible to implement STAS in EVNG virtual device with 30 days License. Need to test virtual before we implement in production any command to check if a user login or logout because its Ip to user mapping. Thanks satya
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • client authentication agent

    kumaresh subramanian
    kumaresh subramanian
    Client Authentication Agent is not working in our office, i have upgraded all computers to Windows 11 Error it says You are not allowed to log in from this machine Kindly help us on this please Kumaresh St.Joseph's College of Commerce 9…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • New QR Code

    Wilson Natanauan
    Wilson Natanauan
    How do I generate a new QR Code for the users we have users who have been issued with a new Iphones , they have wiped out the old phones with the Sophos Authenticator App as a result , they cannot setup their Account to the new Phone because they…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Connect Client Provisioning Files with MFA enabled

    DavidSain
    DavidSain
    I setup a connect client with a provisioning file. Had Authentication to an AD server setup. When the user connects for their first time while using a provisioning file, it works beautifully. Now, enter MFA. Because most places want some extra security…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • MFA on web authentication

    Guilherme Silva1
    Guilherme Silva1
    I am using MFA for certain users, using it in Web Admin Console, SSL VPN and User portal in which there is no way to disable it. However I would not want to require MFA for web authentication, for example, an unknown user is directed to the web portal…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • WMI BLOCKED / STAS

    Bruno H Silva
    Bruno H Silva
    Dear colleagues! We are having problems connecting via STAS on newer versions of Windows. In Sophos Transparent Authentication Suite in WMI VERIFICATION, the workstation shows access denied. We even used the key below but it doesn't work anymore. Path…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • STAS logon type is 3 ??

    Fotit
    Fotit
    Hi all, FW XG v (SFOS 19.0.1 MR-1-Build365) I just have 2 DCs with stas installed. I think stas authentication is working as you like in the capture, logon type is 3 !! But logon type 3 as defined: The STAS agent runs on a member server and…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • AD SSO Authentication and site-to-site VPN connection

    Sophos User6264
    Sophos User6264
    Hello all, We have a problem with one of our software applications. We are using SFOS 19.5.0 GA-Build197. The software needs to connect to a remote server which is only available via site-to-site VPN. The connection is configured and is working (green…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • AD Authentication with STAS working but User firewall rules does not evaluate as authenticated

    IT_Chemes
    IT_Chemes
    I have two Domain controlers and on both installed STAS for twho Sophos XG HW appliance in HA active-pasive. After upgrade from 18.5.4 to 19.5.1 i have problem evaluating user rules. After upgrade i reinstall STAS to newwr vrsion on both DCs. I need reeneter…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Sophos XGS STAS IPv6 support

    Oldrich Cuda
    Oldrich Cuda
    Hi there, are there any plans that STAS will support IPv6? We are using IPv6 and STAS agent is not able to work if user is using IPv6. Besr regards, Oldrich
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • ZTNA SMB Authentication with on-premise file server

    b_192
    b_192
    Hi I am hoping someone may have come across or can point me in the right direction. We have configured ZTNA and have been testing with web based SaaS apps and access to SMB shares to a file server on premise. We have started to experience some issues…
    • over 1 year ago
    • Zero Trust Network Access
    • Discussions
  • Problem with Apple devices and RADUIS

    SchulIT Aalen
    SchulIT Aalen
    Hi everyone, I have a big problem with wifi RADIUS and Apple devices. I am using SG330 firewall and APX530 access points, all with the newest Firmware. The problem is this: All of our Apple devices (iPads and iPhones) looses their connection…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
<>