Hello, We need people connecting to the open Wi-Fi network to log into a captive portal to keep track of their web activity. So far the configuration that is closest to the behavior I want to achieve is the one described in this article: support…

Hallo zusammen, ich hänge an einem für mich im Moment nicht lösbaren Problem...wahrscheinlich nur ein simpler Fehler, aber ich komme nicht drauf. Hardware SophosXG 106, Unifi CloudKey, mehrere Unifi AC Pro AP`, WLAN getrennt, Guest LAN und Business…

Hi, We have a Cyberoam 50iNG that recently migrated to SFOS. Users use Captive Portal to authenticate to firewall. I am using a valid ( not self-signed ) certificate for captive portal that works fine and have no certificate error when I open captive…

Hello, I have a wifi AP hosting some networks, I would like to make them going un-natted to my XG firewall. I wasn't able to find how to add subnets to zone LAN. Static route is set, ping are fine. But when I try to route outgoing packets to…

Hello There ! Do you have any idea why a warming page doesnt load on VPN connection ? For example, im trying to test AV -> downloading Eicar testFile thru SSL And from LAN it does work displaying WARRING see below. but from VPN - NOT Gives…

Hello! Hoping someone has seen this before and has found a solution. I am running XG firewall home version SFOS 18.0.4 MR-4 on a home network. I have a basic LAN to WAN firewall rule with #Standard LAN Policy applied to it and Match known users unchecked…

Hi, When a VPN user attempts to access a blocked webpage they are not presented with the captive portal/blocked webpage message, the page just times out instead. I have enabled the captive portal on the LAN and VPN zones under Device Access. The strange…

Hi, We are using SOPHOS XG125 (SFOS 18.0.4 MR-4) and Windows AD as authentication server on it. We are using ONLY ClientAuthenticationAgent app on all office connected terminals. The problem is as I uncheck Use web authentication for unknown users…

Hi there, We noticed that after upgrading to SFOS 18, Sophos XG is not using the correct SSL Certificate for the captive portal. As you can see we have it set in the Admin settings on the device: And it's being used on all services, but the Captive…

I`m trying to configure my Sophos XG 105 with an external captive portal url but i can`t figure out where i set up that. First of all, is it possible? If so, how do I do that? Is there any documentation I can follow? Regards!

Hey there Sophos Community, i am working with AD-SSO and STAS authentication with our XG230 firewall from sophos. We havent use web authentication for about 3 years and now we want to start using this function. Everything seems to work correctly and…

Hi, Good day, i have choosen a device name for my sophos xg firewall (administration>Admin Settings>Host Name: sophos.cedes ) but i can't ping to it, it doesnt work also when i go to https://sophos.cedes:4444 for the admin panel or https://sophos.cedes…

Hello, Last year I used the captive portal feature in a student home with about 50 students. Some of them complains that the sessions gets disconnected too often. Some students say that whenever they lock there phone the session breaks, other people…

Hi, good day. I have a router that has bandwidth control and ip groups, this is very usefull for me. From the router i take the Internet service to a port on my Sophos Firewall (its a dell optiplex server with 3 lan ports). This PORT 1, works on the…

Hi, I'm new to Sophos. I have two WAN connections.. One for general purpose(WAN1) and other for business(WAN2)... I'm wondering whether if I can have the users in one WAN1 and have internet access by default... and then authenticate the users through…

Hallo, wir setzen bei einem Kunden eine XG125w ein. Hier haben wir ein Hotspot-Netzwerk für die Mitarbeiter eingerichtet. Anmelden müssen sich die Benutzer über zwei Faktoren, zum einen über den Voucher und zum anderen mit Ihren AD-Anmeldedaten (Webclient…

HI, we are facing problem with captive portal login in Internet explorer 11. if Captive portal IP is added in Compatibility mode (IE 11) then it is not allowing to login (no message/error after press enter). once we remove captive portal IP from Compatibility…

Hi guys, I try to configure Captive Portal as below: On the Client Machine, i have imported the Sophos CA SSL Certificate as Trusted Root CA. On the Firewall Rule, Scan and Decrypt HTTPS is disabled With Firefox, the XG can redirect to Captive…

Recently I am testing the Captive Portal feature on Sophos XG Firewall (VM). I have enabled Captive Portal on LAN interface which connected to a sigle Macbook that has multiple local profile for different users. However I found out that when User…

La única forma que tengo ahora mismo para que un usuario se desconecte, es por medio de la interfaz del administrador, por lo que busco una forma que el mismo usuario se pueda salir de su cuenta sin necesidad que me tenga que contactar para ello. le…

I have a doubt as administrator of a small network, and is it possible that the user who enters through captive portal, can leave your account by your own means ?. No need for me to remove it from the system through the administration interface.

So perhaps someone might have a creative solution to this: We allow our users 3Gig of free data per month, as per expected sophos handles this nicely, and will reset the users counters at the end of the month, giving them another 3 gig's for the new…

Hi,When I connect to WiFi for first time.Sign into network notification appear and I fill captive portal then connect to internet successfully but If it's disconnected because of inactivity time or else.I don't get any notification.Not appear no internet…

Hi All, I'm having a problem here that part of the AD user are login through web client instead of STAS. On the XG we have configured the STAS and it is working fine until yesterday we upgraded the box firmware to SFOS 17.0.3 MR-3 Initially all…

Hello, I'm wondering how to go about allowing a device to not have to log/bypass the captive portal. Basically needing a way that certain devices are logged in all the time and do not have to authenticate. Doing it by IP does not really work for me…