• General question about AD sync with XG

    itguy318
    itguy318
    In my environment i have enabled SSL VPN on my XG. Authentication is through AD. I have an AD security group which synchronises with XG. I add AD members to this group and SSL VPN access is granted to the users of this AD security group. I have some…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Sophos XG s2s vpn - offiste Domain Controller for authentication ssl vpn

    genbreit
    genbreit
    Hello all, we have a nearly exact setup which is described in the below link. So we have s2s ipsec vpn tunnel between two sophos XGs. https://support.sophos.com/support/s/article/KB-000035830?language=en_US We did this configuration to be able…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Sophos XG210 MR4 OTP Token with AD authentication - error 17705 and 17711

    Stephan Bückert
    Stephan Bückert
    Dear community, i got some problems with Sophos XG210 MR4. I created a new AD user for testing, activated OTP and assigned the testuser to it. I got a new hardware token i integratet and assigned to the testuser. Now i done some testing, testuser…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Active Directory failed authenticating users of subdomains

    Alex Ahmadi
    Alex Ahmadi
    Hi all, I have a Sophos XG device integrated with Active Directory. My Active Directory has 15 sub domains in my network. This works as intended but we have some trouble with the AD connection. We have a root-domain and 15 subdomains. We have a global…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Radius test failed

    Josh Rogalski
    Josh Rogalski
    I am setting up Sophos XG Wireless for the first time, and having some trouble with Radius. I have a ticket open with Sophos support, but wanted to reach out to the community to get their take on the issue. I followed the instructions by Sophos for setting…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • AD Users cannot log into Sophos Portal

    Ashish Gupta
    Ashish Gupta
    I just configured New AD Server windows 2019. I configured users on sophos for vpn remote access. For downloading the client certificate , when I try to logon to Sophos portal it fails On windows side i can see successful log on and immediated…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Domain authentication - admin PW with special characters

    AOP
    AOP
    Good Day everyone! we have trouble with some XG Firewalls. All administrator accounts with some specific special charactes like ' arnt working anymore. It happened on Firmware 17.5.2 and is still buggy on 18.0.3. So no new users are able to authenticate…
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • User duplicates being created constantly, not being read from AD.

    MSCIT
    MSCIT
    Hi there, I have just stumbled up on an issue - on our XG a handful of users (not all) are being created as what looks like "local" users on the XG. Normally users are STAS'd and compared to their AD account and registered with their "account@account…
    • Answered
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • SSL VPN - Changing Authentication from AD to Radius (Duo MFA)

    Alex Ghiorghies
    Alex Ghiorghies
    Hello, If I change the Authentication for SSL VPN clients from Active Directory to Radius, are the users required to re-download the SSL VPN config or client from the user portal? Thank you, Alex
    • Answered
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • SSL VPN single mistyped password causes AD lockout

    Josh Rogalski
    Josh Rogalski
    We have SSL VPN connected to our Active Directory domain controllers. We found that after configuring the VPN our users were routinely locking out their AD accounts. This is happening after a single mistype of a password on the SSL VPN. I have researched…
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • Is Sophos IPS able to detect CVE-2020-1472 based attacks?

    LHerzog
    LHerzog
    CVE-2020-1472 Zerologon is about to go into the wild. Is XG able to detect those logon attacks with IPS?
    • Answered
    • over 4 years ago
    • Sophos Firewall
    • Discussions
  • User Authentication - AD Group in Group

    danny_mv
    danny_mv
    Hey, following Problem: I have a Active Directory group "G-SSL-IT". In this group are other groups ( e.g. IT, Support etc.) . In XG i´ve imported the group "G-SSL-IT". In AD I manage the users only in the sub-groups. For Example: Bob --> G-IT…
    • Answered
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • AD Integration

    Mahmud Ismail
    Mahmud Ismail
    Integration of XG with AD Installed and configured Sophos Transparent Authentication Suite on both ADs, both Agent and collector are installed on both Servers, one Collector list is configured on one server pointing to the other server, it is running…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • Certificate Error: The security certificate was issued by a Company you chose not to trust

    Charles Zvarimwa
    Charles Zvarimwa
    I recently installed Sophos XG 125/ w125 on our network. After installation I have been receiving the “Certificated is not valid” error when trying to open the outlook application. I am using Exchange 2010 and previously when I was using TMG I did not…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • SSL VPN Suddenly Stopped Working

    LRJadmin
    LRJadmin
    Good Evening, I recently joined a team and started up our own MSP. One of the clients we took over is using a Sophos XG210 (SFOS 17.0.3 MR-3). I am not real familiar with Sophos, though this same unit died and was RMA'd largely in part due to someone…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • AD integration with xg firewall

    nisar ahmed
    nisar ahmed
    Dear all, I have installed stas and integrated AD with xg310. Then i did import all the users from AD into Xg-310. And created a firewall rule to access internet from lan to wan and enabled "match known users" & "Captive portal to unknown users…
    • over 6 years ago
    • Sophos Firewall
    • Discussions
  • STAS on two domain

    Iffi
    Iffi
    My Client have two domain(A and B)and trust relation have been established between them. Both Domain have same subnet and both are connected with Sophos XG. All work fine, now I want to configure user base rules for both domains in a XG firewall.…
    • Answered
    • over 7 years ago
    • Sophos Firewall
    • Discussions
  • AD Authentication Server Configuration Problem

    M.Hegazy
    M.Hegazy
    hello everyone here iam still trying to configure all rules i need to apply on my work environment i have read that i can setup my AD as authentication server to let users access the internet but i couldn't make it work and i hoped to figure out…
    • Answered
    • over 7 years ago
    • Sophos Firewall
    • Discussions
  • Integrate Sophos XG 230 with Active Directory And Setting Up The Authentication Server

    dbachour
    dbachour
    Greetings, Trust you are doing well, I am working on XG integration with AD user groups and OUs. I was able to setup STAS and configure it. But now, before make it running, I want to understand one thing. The user will be authenticated when he/she…
    • Answered
    • over 7 years ago
    • Sophos Firewall
    • Discussions
  • Active Directory w/ subdomains: authentication fails for users of subdomain

    Denny G.
    Denny G.
    Hi all, we have XG-310 (FW: HW-SFOS_16.05.6_MR-6.SF300-266) with some REDs setup as a trial. This works as intended but we have some trouble with the AD connection. We have a root-domain and a subdomain for each subsidiary. We have a global security…
    • over 7 years ago
    • Sophos Firewall
    • Discussions
  • SSL VPN AD Auth ERROR

    sindrehal
    sindrehal
    Hi. I have a couple of users that use SSL VPN and do auth by Active Directory, but only 1 user alway get AUTH_FAILED even username and password is correct. This is my personal user. I can login to user portal and Admin, but alway get AUTH_FAILED. …
    • over 7 years ago
    • Sophos Firewall
    • Discussions
  • We want to be able to easily identify students by their ID when web surfing. Can we use AD to use their login ids?

    Stuart Mainwaring
    Stuart Mainwaring
    Hi From what i can see the AD integration only allows people to login to the SOHPOS server. We need to have an accurate way of viewing a students travels around the web. We are currently using RADIUS logs to reconcile IP addresses against user ids as…
    • Answered
    • over 7 years ago
    • Sophos Firewall
    • Discussions
  • Add Active Directory Server to XG 320

    dbachour
    dbachour
    Greetings, Trust you are doing well, I am trying to add my Active Directory to Sophos XG 230 as an Authentication Server. But, I am keep getting that the credentials are wrong. What are the possible solutions/causes for such issue?! Is there any…
    • Answered
    • over 7 years ago
    • Sophos Firewall
    • Discussions
  • STAS - Users didn't show in the Live Users section.

    John Henry Vindas Carballo
    John Henry Vindas Carballo
    Hi all, I did configure STAS on a single DC. Communication between XG and DC it's working but some users didn't show up in the firewall. This means the firewall rules don't apply to him. AD Server: 128.128.128.28 XG appliance: 192.168.50.1 …
    • Answered
    • over 7 years ago
    • Sophos Firewall
    • Discussions
  • How can I set up web access via PROXY PORT only?

    Someone7272
    Someone7272
    After a year, I've decided to try Sophos XG again. Currently using UTM 9.5 - which has its issues, but works well. I am trying to find out how to force all web requests through the proxy port. Sadly, I'm not getting far with Sophos XG. If I add a…
    • over 7 years ago
    • Sophos Firewall
    • Discussions
  • View related content throughout Sophos Firewall
  • More
  • Cancel
<>