Hi all, I just installed two XGS136 as gateway for our guest network. We use APs from Extreme and the authentication via PPSK codes, that are generated on a per user basis via the Extreme API (in the future). Currently we still use a guest known PSK…

Hello, I hope you can help me because I am stuck on a problem related to a dedicated proxy that is not hosted by Sophos XG. We must publish a public wifi network through RED whose captive portal is hosted by a UCOPIA proxy server with its own internet…

Doesn't seem to be an option for "Can't scan QR code" which normally gives you a code you can enter to Authentication app to add manually. Even Microsoft has this ability on 365. Can this be added?

Hi All, We have XG330 with 18.5.3-MR3 and we have SAP server behind it. Our SAP servers send SMS using HTTP. To do so SAP recommends using Proxy settings. The Proxy settings require following details to be added: Server IP (That would be my Firewall…

HI All Have an issue with a VPN SSL I can connect to the VPN SSL serverbut can't access LAN. I have added Firewall rules LAN-VAN and VAN-LAN and nothing changes. Are you able to give me hand. Thanks in advance. All the best

It's possible to export STAS config and the import to another STAS? In the future is planned to "integrate" SSO-Agent in XG Firewall (like Fortinet SSO Polling)? Thanks

Good morning, we have a problem with WebAuthentication from Sophos FW which is not actually enabled, in V18.5.3 no one had to log in to access the internet and now many users get a prompt to log in to use internet. We use STAS and SATC for synchronizing…

I have set an inactivity timeout as 60 minutes and a threshold of 512 bytes. Still users are getting logged out after few minutes of inactivity. I have the latest firmware. Any solution?

Hello, When i'm implementing Sophos transparent authetification, i found that the STAS agent run communication on port 1220. But In documentation it mentioned that the agent need only port 135 and 445 to be open on the client side. RODC (STAS…

Is there a recommendation how to use the AD home folder feature when using Intercept-X, Heartbeat and User Authenticated firewall rules? The folder will not mount because it happens very early at the user logon on the endpoint and the user is not…

Hello, I'm experiencing an issue related to DCOM error logs generated in Active Directory. I saw that they already have several records for other users, who faced the same problem with these logs, but in none found a solution or some conclusive answer…

I had updated the firmware for sophos firewall yesterday and after that we are facing the captive portal issue. Our setup: We have STAS enabled for domain systems where users can use internet directly after logging into domain pc's, those who are…

Hi all has anyone experienced intermittent issues since deploying this? I've installed the Server Protection EAP, ran the powershell to migrate the SATC ini settings to the registry, uinstalled the old SATC and rebooted, and all was working fine. but…

after update to 18.5.3 MR-3-Build 408 captive portal doesn't work sometimes show pop up windows to login without "captive portal" page and sometimes does not appear anything and dont working on any mobile at all

Hi; In Android & iOS: when I Authenticate with Sophos agent; It has showed me you are connected but when I clicked on disconnect, it shows me: "You are disconnected" but my mobile device has internet access yet. and when I check user activity I can…

Hello All, We have a site that has Sophos XG and the workstations has Sophos Endpoint Intercept X Advanced installed (NO server onsite) XG is configured for Sophos Central. Security Heartbeat 12 endpoints connected 0 endpoints at risk 0 endpoints…

We have 2 XG 750s (Passive HA) facing the WAN (IPv4) and a large 10.0.0.0/8 network on the LAN side. The LAN side consists of L3 core switches and several hierarchies of L3 and L2 switches. As of today, the captive portal authenticates all users against…

i had setup captive portal for the user to access internet, is that possible to create a policy which can access the specific website and application without authenticate, login the captive portal?

I have the same eror as in KB-000035617 Since its closed I simpky copy this one over to here: https://support.sophos.com/support/s/article/KB-000035617?language=en_US I followed those instructions but i could not execute the caa file from bin file…

Hi guys, We have couple of XG Firewalls and they all have STAS enabled. All working as they should be regarding firewall rules and "Match known users" however I run into a weird behaviour. We have few websites where we would like to give access…

HI Im implementing Sophos XGS with AD, but users are logging out from XGS randomly, I configured STAS with WMI, and I have read a lot of forums but I have couldnt get a real solution. Thanks Diego Vargas

Hi, We have a XG 135 firmware version XG135 (SFOS 18.5.2 MR-2-Build380) running in our office. We have a mix of clients using Windows 7, Windows 10,Windows 11 We are running client authentication agent on each system to login into the firewall. All…

We have an external captive portal platform. With other kinds of hardware like Aruba, Cisco, OpenMesh, etc., we can configure them to open our captive portal that is externally hosted. We have also remote RADIUS servers. Is it possible to do that…

Greetings, Company users who connect to the internet with their mobile phones have to enter the captive portal user name and password every Monday. If we increase the timeout to 4320 minutes (3 days) instead of 1440 minutes (1 day) in the Web client…

Hi, In existing environment I am using Sophos XG with Client Authentication being installed in all PC's for accessing Internet. While surfing on net I came across a configuration wherein I can configure browser for Kerberos Authentication. So by this…