Hello everyone, I was curious about the way Authentication Client works. You remember previous version of that? (Cyberoam Generic Authentication Client)? In that version, clients where able to change the IP address of Cyberoam in the setting. So,…

Hi all, I want to know if caa is more efficient than stas authentication? when to use caa and when to use stas ?what could be the difference between stas and CAA? Does CAA automatically require firewall integration with AD? Can we use stas authentication…

Hi all, normally a domain user, when he tries to connect with a workgroup computer he is automatically redirected to the captive portal, and also an ordinary user who is not a domain user. but I notice that this redirect is gone for domain users, and…

I see XGS OS19.5 now allows Azure AD to be used for SSO for admin access to the webadmin. Can the XG also be configured in a similar manner so that users can authenticate to Sophos Connect using their Azure AD details, and any possibility of using the…

Hi Fellas. I just wanna test Captive Portal scenerio where a guest wants to connect to network, and before access any resources it must authenticate <-- i think that is obious. So i decided to check it on SophosXG where some things are done much different…

Hello, we have Linux with Sophos Antivirus and MacOS Clients with Intercept X installed. On the firewall we have many rules with userauthentication (and heartbeat) required. We enabled 2FA for many users to secure our SSL VPN. The users are required to…

Hi All, I'm currently using CAA to authenticate users to the firewall so that user group-specific rules can be applied. However, it has some issues, especially when a PC is used by more than one user - it installs in the first user's profile folder…

Hi, Is there or could Sophos provide the documentation of the protocol or API to implement a custom STAS collector ? If we could develop our own STAS collector, we could authenticate users already authenticated with a 3rd party VPN solution. …

I have two independent users that use the same login and password. One of the users has installed the MFA QR code. I would like for the other user to have his own Authenticator. Is this possible?

Hello,from time to time I try to run the caa client in different ways (*1) never works. However I've noticed I've been logged in the firewall for a few months now. I leave the office daily and take my laptop with me yet the user is still present in…

The CAA certificate on our XG 18.5 MR4 has expired without any warning. Nice! So all our clients with CAA cannot authenticate against that firewall. How would Sophos resolve that issue withour recreating the ApplicanceCertificate? C:\OpenSSL…

Updated Updated from SFOS 18.5.4 MR-4-Build418 to SFOS 19.0.1 MR-1-Build365 Captive portal is not using my uploaded signed certificate, Admin portal and user portal are using correct certificate. Same…

Dear all, We have recently upgraded firmware version v19.01 in our XGS2300 High Availability setup. After that we couldn't able to login into Firewall through Client Authentication Agent in particularly windows 8 devices and there is no problem in windows10…

I have three seemingly random computers on my network that keep showing up in the Live Users page. When I delete them, they come back. How can I dseletel them permanently?

New install of XG Firewall in a UK school and I am really struggling to get the Capture Portal to work on IOS and Android devices. It works for Windows devices, as soon as I connect to the network, a logon window appears (not the sophos one) and I…

Running into an issue and I'm at a loss to find the answer. Essentially when I first set up my XG firewall (Home User) I was able to successfully configure CAA access for all my endpoints and everything was working fine. About 2 weeks ago the firewall…

Hello Everyone, I want to know which mechanisum is use to authenticate the Azure Ad user from sophos firewall? In the case of Onpremise AD we have to installed STAT Agent into AD server for Communication between Firewall and AD server. Now in Cloude…

Hi all XG330 (SFOS 18.5.4 MR-4-Build418) today i get this error on CAA Could not validate certificate! CAA Will now close certificate is already deployed on windows computers and expire at 2036, no problem before until today. I have one MAC…

Before I throw up a load of detail, I was just interested if anyone else has had any issues with captive portal displaying on apple devices since the 19.0.1 upgrade?

Hi All. I cannot access the sophos internet authentication portal page from the user's computer. When Google Chrome Web Browser upgraded to Version 104.0.5112.81 (Official Build) (64-bit) (in older versions of chrome, I could still access sophos internet…

Hi We having an XGS2300 (SFOS 18.5.0 GA-Build264) and captive portal is configured for all user who wish to access the internet. Redirection to portal works but,: No confirmation the users is authenticated and the original page requested is…

I have a problem with SOPHOS XG Home edition everything was working fine but suddenly captive portal stopped showing and everyone can now access my internet. and I can't even add a password on the wifi to prevent anyone from getting to my internet…

I went away over the weekend and on login on Monday I now get the following error and the CAA exits, nothing should have changed from when it was last working on Friday. Error: "Could not validate certificate! CAA will now close error" XG Firewall…

Hi, can I use the captive portal and user controll with base license? Or should I have to use the network protection license? Best Regards

Hi all, I just installed two XGS136 as gateway for our guest network. We use APs from Extreme and the authentication via PPSK codes, that are generated on a per user basis via the Extreme API (in the future). Currently we still use a guest known PSK…