Hello.
My client wants to tweak the behavior of his organization's captive portal. Currently, some devices after gaining access to the Wi-Fi aren't being redirected to the captive portal page. I performed a reboot of the firewall and all users were…
I cannot find the Sophos Authenticator app in the Android Play Store. It was there a couple months ago. Where can I find this app to install it on a cell phone?
Hi,
i have a question. I have a Sophos Firewall at home. I have rules and Web Policys for special users, so i had installed the Sophos Network Agent on my smartphone.
This is some time ago.
Now i have a new rule. I need on other Android devices…
sophos XG retaining authentication details on an existing ip address.log on to captive portal
If i log in for the first time and after i get back into the office for the second day and i am giving an IP address it uses the existing authentication details…
Hi l have a XG 310 RUNNING V18.54.
We have a captive portal issue .. when users try to access the captive portal link with the IP address , its showing the attached error
Whatever "thrustworty" is... my Server isnt
Suddenly the CAA stopped working on our CEOs Macbook and he cant work anymore.
Reinstalled etc but cant get it running. Got a time limit of "2 hours" then "sophos has to go" :/
Any tips for me?
Would it be possible and would it be a good idea to add the capability for Clientless Users to be designated via MAC address rather than IP address? That is, in the IPv6 world. where a machine can have many concurrent and past (but not yet invalid) IP…
Hello everyone,
I was curious about the way Authentication Client works. You remember previous version of that? (Cyberoam Generic Authentication Client)? In that version, clients where able to change the IP address of Cyberoam in the setting. So,…
Hi all,
I want to know if caa is more efficient than stas authentication?
when to use caa and when to use stas ?what could be the difference between stas and CAA?
Does CAA automatically require firewall integration with AD?
Can we use stas authentication…
Hi all,
normally a domain user, when he tries to connect with a workgroup computer he is automatically redirected to the captive portal, and also an ordinary user who is not a domain user. but I notice that this redirect is gone for domain users, and…
I see XGS OS19.5 now allows Azure AD to be used for SSO for admin access to the webadmin.
Can the XG also be configured in a similar manner so that users can authenticate to Sophos Connect using their Azure AD details, and any possibility of using the…
Hi Fellas.
I just wanna test Captive Portal scenerio where a guest wants to connect to network, and before access any resources it must authenticate <-- i think that is obious.
So i decided to check it on SophosXG where some things are done much different…
Hello, we have Linux with Sophos Antivirus and MacOS Clients with Intercept X installed. On the firewall we have many rules with userauthentication (and heartbeat) required. We enabled 2FA for many users to secure our SSL VPN. The users are required to…
Hi All,
I'm currently using CAA to authenticate users to the firewall so that user group-specific rules can be applied. However, it has some issues, especially when a PC is used by more than one user - it installs in the first user's profile folder…
Hi,
Is there or could Sophos provide the documentation of the protocol or API to implement a custom STAS collector ?
If we could develop our own STAS collector, we could authenticate users already authenticated with a 3rd party VPN solution.
…
I have two independent users that use the same login and password. One of the users has installed the MFA QR code. I would like for the other user to have his own Authenticator. Is this possible?
Hello,from time to time I try to run the caa client in different ways (*1) never works. However I've noticed I've been logged in the firewall for a few months now.
I leave the office daily and take my laptop with me yet the user is still present in…
The CAA certificate on our XG 18.5 MR4 has expired without any warning. Nice!
So all our clients with CAA cannot authenticate against that firewall.
How would Sophos resolve that issue withour recreating the ApplicanceCertificate?
C:\OpenSSL…
Updated Updated from
SFOS 18.5.4 MR-4-Build418
to
SFOS 19.0.1 MR-1-Build365
Captive portal is not using my uploaded signed certificate, Admin portal and user portal are using correct certificate.
Same…
Dear all, We have recently upgraded firmware version v19.01 in our XGS2300 High Availability setup. After that we couldn't able to login into Firewall through Client Authentication Agent in particularly windows 8 devices and there is no problem in windows10…
I have three seemingly random computers on my network that keep showing up in the Live Users page. When I delete them, they come back. How can I dseletel them permanently?
New install of XG Firewall in a UK school and I am really struggling to get the Capture Portal to work on IOS and Android devices.
It works for Windows devices, as soon as I connect to the network, a logon window appears (not the sophos one) and I…
Running into an issue and I'm at a loss to find the answer. Essentially when I first set up my XG firewall (Home User) I was able to successfully configure CAA access for all my endpoints and everything was working fine. About 2 weeks ago the firewall…
Hello Everyone,
I want to know which mechanisum is use to authenticate the Azure Ad user from sophos firewall?
In the case of Onpremise AD we have to installed STAT Agent into AD server for Communication between Firewall and AD server. Now in Cloude…
Hi all
XG330 (SFOS 18.5.4 MR-4-Build418)
today i get this error on CAA
Could not validate certificate! CAA Will now close
certificate is already deployed on windows computers and expire at 2036, no problem before until today.
I have one MAC…