I'm looking to install Sophos STAS, so I created a user account to run as the service, svcSophos. I went to services.msc, entered the credentials and it tells me it isn't authorized.
What are the minimum groups this user needs to be added in, or roles…
I have recently deployed STAS in my network. Users are having issues getting proper access to network resources when browsing from the terminal server. What could be causing this ?
Hi All,
I'm having a problem here that part of the AD user are login through web client instead of STAS.
On the XG we have configured the STAS and it is working fine until yesterday we upgraded the box firmware to SFOS 17.0.3 MR-3
Initially all…
I'm about to implement STAS for our Sophos UTM and trying to see if it is best to spin up a RODC so I can allow only local admin rights on that VM. With a DC that is a Global Catalog Server, adding an account to the "Administrators" group under BUILTIN…
Hi guys,
I'm run into a tricky issue with the STAS. Everything is working fine until I reboot the SFOS 17.0.2 MR-2 (appliance software on KVM). Ater the reboot the XG keep the user in learning mode, dropping traffic, until the user is marked as unauthenticated…
Hello everyone.
I require your help with a concern that a client poses to me for which this is something reasio to mount the STAS on your domain controller to do SSO.
The client asks us for a different method to do SSO, says that for them mount some…
Hola, tengo el visor de sucesos lleno de errores del stas.
DCOM no pudo comunicarse con el equipo 10.0.102.188 usando ninguno de los protocolos configurados; solicitado por PID c7c (C:\Program Files (x86)\Sophos\Sophos Transparent Authentication Suite…
Dear All,
We just deploy XG into our environment and noticed that user keep on losing internet connection and after 10 seconds, connection resume.
Further checking into the log viewer, it seems that the user was being logged out while they are online…
I just installed a new SG310 in one of our datacenters. We have multiple locations, and several Sophos appliances running different versions. As the title suggests on the newest appliance I've installed I actually pulled out an appliance running UTM 9…
Hi All,
I'm facing an issue here that the XG firewall seems doesn't communicate with the STAS.
On the STAS, we are able to see there's AD user being login on the Live user tab. However at user under XG firewall, there's no user shown.
I have been…
Dear all,
I'm using sophos xg 17 and I face a problem with AD integration, I 'm using STAT with logoff detection method workstation polling ,I also activated captive portal for unknown users by adding the last firewall policy to deny any to any and…
Good day All,
I have setup a lab test environment for the ADSSO.
I setup the STAS on both Primary and Secondary AD, Primary is Server2012R2 and Secondary is Server2008R2.
The STAS configured on XG is pointed to Server2008R2, it able to pickup the…
I 'm using xg v 17 and and I added AD server to authenticate users and I downloaded STAT and installed it on active directory, I used ping as logoff detection method to avoid the users being logged off after few minutes , I added firewall exception to…
Hey i followed this guide to authenticate my Users: https://community.sophos.com/kb/en-us/123156
But half of the Users show up as Administrators from their PCs.
Why? To put the Administrator on the Exclusion list is no option. Then half of the…
Several months ago I enabled Authentication on my XG v16 VM since this I've upgraded to V17 and still experience the below issues.
After enabling authentication at times I will randomly loose internet access this seems to happen in particular when…
My Client have two domain(A and B)and trust relation have been established between them.
Both Domain have same subnet and both are connected with Sophos XG.
All work fine, now I want to configure user base rules for both domains in a XG firewall.…
Good day all,
We are having issues on the clientless SSO that there's multiple account hoping around the end user.
Below are the scenario
1) Multiple account sign-in
I have login with my AD account and it can be seen authenticated on the AD and…
We have tried to set up SSO in our company and we faced issues while changing from one subnet to another. Since we were under premium support, we raised a ticket but still couldn't solve. Is there a solution to it??
Hello,
After implementing STAS in my environment, I've got an issue I don't understand why it's happening.
It's an environment of 3 domains: one top-level domain (eg domain.local), and two sub-domains (sub1.domain.local and sub2.domain.local, hypothetically…
Greetings,
Trust you are doing well,
I am working on XG integration with AD user groups and OUs. I was able to setup STAS and configure it. But now, before make it running, I want to understand one thing.
The user will be authenticated when he/she…
Hello, I have two questions:
Is it safe to upgrade the firmware from SFOS 16.05.3 MR-3 to SFOS 16.05.7 MR7 ? I'm using STAS and I've been told that the MR7 firmware has some issues with those who use STAS.
And I have two XG210 in HA mode (active-passive…
Hello everyone,
I have serious issues with deploying STAS in a customers environment. I have installed the STAS agent in several environments according to KB123156 and haven't had any problems yet but on this system something seems to be wrong...
…
Hello
Plz how can i bloc acces to the internet for NON-Aactive directory, or Local User.
I already import my AD user and make the policy for only AD User, and check the " Match known users is selected"
But i see that all PCs from the local subnet…
Hi
I setup a new XG115 and added the AD Server with test connection was successful. Also I installed STAS but I it seems have to have an issue left since I can't login with my windows users.
My Server has the IP 192.168.109.211
My XG115 192.168…
Hi
I setup a new XG115 and tried to setup the STAS. For that I tried to follow this guide: https://community.sophos.com/kb/en-us/123156
Unfortunately, in the part for the firewall configuration it seems there are some commands missing:
Step…