• Why doesn't the XG SSL-VPN client recognise a 3rd Party 2FA Authentication Confirmation?

    Andy Hanson
    Andy Hanson
    When you ask the user to authenticate with an additional RADIUS server, directed at a 3rd party solution (for example SecurEnvoy, Swivel, Vasco), and the user strongly authenticates (ie username and password+passcode) which is acknowledged by the 3rd…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Problem setting up WPA2-enterprise Wifi

    Christian Fournier
    Christian Fournier
    Hi everybody, I've got some difficulties setting up a Wifi access with 802.1x authentication. My setup consists in a XG330 firewall and APX120 access points. I've followed these 2 guides: - https://community.sophos.com/sophos-xg-firewall/f/recommended…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Sophos Firewall: Configure RADIUS for Enterprise Wireless Authentication with Windows Server 2012

    DominicRemigio
    DominicRemigio
    Disclaimer: This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents Configure RADIUS on Windows Server Configure…
    • over 3 years ago
    • Sophos Firewall
    • Recommended Reads
  • RADIUS MFA and VPN

    Christian136
    Christian136
    Hey, we set up a RADIUS Server for MFA login with a OTP token. If i put the Radius Server to User Portal login, i type in my AD credentials and in the next step the access challenge comes up for the OTP token. Everything is fine. But this is not working…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • RADIUS SSO Dropping Authentication

    Network Manager7
    Network Manager7
    I have a problem with the RADIUS SSO where by when laptops and devices connect to the wireless it authenticates against the Windows NPS server which then forwards the accounting packets to the Sophos XG. This works and users are able to connect and…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Sophos Client Connect - RADIUS Authentication and VPN Policy

    Hugh D
    Hugh D
    Hi, I have 2 questions about the Sophos Client Connect VPN method. 1. Is there a way I can configure my XG85 to authenticate with a RADIUS endpoint the same as I can with a L2TP connection? At this stage I can only make it authenticate with local…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Non sophos Wifi Authentication

    Sparkz
    Sparkz
    Hi My first post and brand new to Sophos so probably a newbie question. I have a school wifi system, not Sophos. My users connect to the system using their Active Directory user name and password and is redirected to whatever Vlan they are supposed…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Converting from LDAP to Radius Authentication for DUO MFA with Sophos SSL-VPN?

    PeytonClara PeytonClara
    PeytonClara PeytonClara
    We were testing DUO MFA with LDAP authentication to our Active Directory using the Sophos SSL-VPN. Tan into the "timeout" problem and created a Radius login and server to fix this. Now we are seeing: 1. Initial validation appears to work, 2. DUO MFA…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Converting from LDAP to Radius Authentication for DUO MFA with Sophos SSL-VPN

    IT Support152
    IT Support152
    We were testing DUO MFA with LDAP authentication to our Active Directory using the Sophos SSL-VPN. Tan into the "timeout" problem and created a Radius login and server to fix this. Now we are seeing: 1. Initial validation appears to work, 2. DUO MFA…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Radius test failed

    Josh Rogalski
    Josh Rogalski
    I am setting up Sophos XG Wireless for the first time, and having some trouble with Radius. I have a ticket open with Sophos support, but wanted to reach out to the community to get their take on the issue. I followed the instructions by Sophos for setting…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Sophos Firewall: Wireless and Radius authentication on Windows Server 2016

    DominicRemigio
    DominicRemigio
    Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Overview This recommended read describes setting up Radius with…
    • over 4 years ago
    • Sophos Firewall
    • Recommended Reads
  • SSL VPN Client with Azure MFA push?

    Phillip Sumby
    Phillip Sumby
    When I type my credentials and connect, I receive an Authenticator Push and accept it, shortly after I recieve the credential window of the VPN client again. The logs on the Radius server show successful authentication was completed, but isn't being accepted…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • v18 MR4 - Wireless Clients finally listed in WPA2 Enterprise RADIUS authenticated SSIDs

    LHerzog
    LHerzog
    Hi, just wanted to report that we finally see connected wireless clients on our WPA2 Enterprise SSIDs with RADIUS authentication. This has never worked since we moved our APs (mostly 55c) from SG to XG. Now after going from MR1 to MR4 and also upgrading…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Sophos Connect Radius Authentication

    Sophos User3446
    Sophos User3446
    Hi, We have a new Sophos XG and can't get the Sophos Connect VPN to work with Radius. Support have been looking at this for around 2 weeks and no luck yet so I'm reaching out to see if anyone might have any ideas. We have Radius configured and passing…
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • SSL VPN - Changing Authentication from AD to Radius (Duo MFA)

    Alex Ghiorghies
    Alex Ghiorghies
    Hello, If I change the Authentication for SSL VPN clients from Active Directory to Radius, are the users required to re-download the SSL VPN config or client from the user portal? Thank you, Alex
    • Answered
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • Wifi Enterprise with Radius

    Hesham Mahmoud1
    Hesham Mahmoud1
    Dear Team I Use Sophos Xg firewall and integrate it with radius server in order to use it for Wifi Authentication with protocol 802.1x for dynamic VLAN assigned and it working fine except that the users which connect to the wifi keep disconnecting every…
    • Answered
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • Setting up RADIUS Auth for Wireless

    David Ashcroft
    David Ashcroft
    Hi all, looking for a little advice regarding RADIUS setup for our wireless network. We are currently using Aerohive/Extreme for wireless. The system is cloud managed so we don't have any controller or management box onsite for this. I'll try to explain…
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • Wi-Fi -RADIUS authentication doesn't failover to the secondary server

    David Wroten
    David Wroten
    Hey All, I'm having a peculiar issue where Sophos XG fails to detect the primary RADIUS server is offline and finally failover to the secondary server for wireless authentication. Configuration XG135 (SFOS 17.5.7 MR-7.HF062020.1) RAD-1 - Server…
    • Answered
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • Sophos XG with heartbeat work with Cisco WAP581 Access point Radius server

    Steve Wang
    Steve Wang
    Hi all, We use Sophos firewall SG210 on XG platform and heartbeat enabled with firmware 17.0.3 MR-3 and existing firewall rules includes if user laptops don't have have green heartbeat, they cannot access servers on premises such as active directory…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • [Fresh From The Press: Latest KB's] Sophos XG Firewall: How to configure RADIUS authentication for PPTP and L2TP VPN

    FloSupport
    FloSupport
    Hey Community, This KB article explains how to setup a RADIUS server with Windows Server for PPTP and L2TP VPN authentication. The examples in this article use Windows Server 2012R2 as the RADIUS server. Regards,
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Radius accounting information

    BenjaminMiller
    BenjaminMiller
    Has anyone managed to get the Sophos XG to accept the radius accounting data passed to it from a windows server? I was under the impression it could receive this data (username, mac, ip ect) and then it would add them as SSO user automatically so you…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Setting up AP55c with Radius (Windows Server 2016)

    TonV
    TonV
    Hello, I'm trying to setup a Radius server on windows server 2016 to be able to use WPA2 Enterprise and let users log on with their AD credentials, but I find the provided Sophos guides lacking of proper instructions. I just installed the NPS…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • User has to re authenticate when connecting to wifi.

    BEPE_IT
    BEPE_IT
    Hi, Our set-up is as follows: Two XG330 firewalls in HA 3 domain controllers that have the STAS utility installed. 1 of the 3 domain controller is a network policy server 6 meraki AP's that connect to the meraki cloud platform. Most of our…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Integration with FreeRADIUS

    Morph Ean
    Morph Ean
    So far the only reference I can find for integrating XG firewall with RADIUS is for with RADIUS server provided by Windows Server and using Network Server Policiies. We dont use Windows server and use FreeRadius but trying to configure this results…
    • over 7 years ago
    • Sophos Firewall
    • Discussions
  • XGv17 PPTP VPN with RADIUS Authentication / Usernames get lowercased, break MS-CHAPv2

    Florian Lohoff
    Florian Lohoff
    Hi, we updated to XG v17 on the Weekend and since then most of our PPTP based VPN Users are not able to connect anymore. The issue is an "The system could not log you on. Make sure your password is correct" from the RADIUS Server. From debugging my…
    • over 7 years ago
    • Sophos Firewall
    • Discussions
<>