• AD SSO - Cannot establish NTLM authentication channel with xxx

    Stuart James
    Stuart James
    Getting hundreds of these in the log for Authentication: Cannot establish NTLM authentication channel with Have read through all the other forum posts and they say to disable AD SSO in Device Access, but it's already…
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • Issue Configuring Azure AD Connect for Sophos Firewall Admin Console

    abdellah adil
    abdellah adil
    Hello Sophos Community, I'm currently facing an issue while attempting to configure Azure AD Connect for the Sophos Firewall Admin Console, following the tutorial provided here . Despite meticulously following each step outlined in the tutorial, I…
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • Bind fw rules to user - Recommendation for AD-Sync?

    bmu
    bmu
    Hi there, i'm securing our company network a little bit more and want to use the "Match User"-Feature within the fw rules. We're running a central Sophos XG135 cluster an a bunch of branch offices, which are connected via pfSense and IPSec-tunnels…
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • NPS Server in Azure for MFA

    Lars86
    Lars86
    NPS is working perfect with Sophos MFA via onpremise VM try to migrate it to Azure vm but keep getting error: A RADIUS message was received from the invalid RADIUS client IP address 169.254.0.1 on the new NPS server. Any Ideas?
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • Sophos XG Firewall in HA - How many computer accounts should you see in Active Directory

    Marcel Micallef
    Marcel Micallef
    Hi All, We have 2 Sophos XG Firewalls setup in HA and using NTLM / Kerberos authentication. We notice that in Active directory there is only one firewall computer account showing and was wondering if that is ok or if there should be 2 accounts …
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • Sophos Firewall: Create multiple AD Server entities in SFOS for multi domains (Trusted Domain User)

    Shawn Adams
    Shawn Adams
    This seems not to work anymore Sophos Firewall: Create multiple AD Server entities in SFOS for multi domains When I try to do the last step I get the message "Please enter a valid server address in field "Server IP/domain"." I need to somehow…
    • Answered
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • Sophos XG 20.0 FW - VPN PPTP with Windows Bult-in Client

    CK2024
    CK2024
    Hello, we try to work with the PPTP Client vom Windows 10/11 and it doenst works with AD Users. If i try a local user from the Firewall works everything fine, but on AD Users i receive an error that the credentials are wrong. I have tried with DOMAIN…
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • how to install authentication agent on android

    mulah
    mulah
    I've been trying to install sophos network agent on android to authenticate, but on playstore it is not showing the install button the phone has android version 13 is there any way to do this????
    • Answered
    • 10 months ago
    • Sophos Firewall
    • Discussions
  • Looking for a "best practice" design or tips for multiple location/firewall authentication

    kerobra
    kerobra
    Hi, we have a customer, who has about 10 branch offices with each 5 to 50 users and a headquarter with about 50 users. Every BO has its own XGS firewall, which is currently connected via IPSEC VPN and will later be connected via MPLS to the HQ. In HQ…
    • 11 months ago
    • Sophos Firewall
    • Discussions
  • SFOS 20 Entra AD SSO For Captive Portal/VPN Not Working

    colly72
    colly72
    I;m following the few videos that I can find about how to set up Entra AD SSO for captive portal and VPN but I can't seem to get it working. Are there any step by step instructions that I can follow, other than the published Sophos videos, which seem…
    • 11 months ago
    • Sophos Firewall
    • Discussions
  • (Auidt failure - 4625) log caused by the Stas user in the domain

    delivaldez
    delivaldez
    I have a Sophos xg210 model firewall. I use STAS to be included in the domain (Example Username: sophos_stas). I have a server not included in the domain. When I examine the security logs of this server from the event logs, I get an audit failure error…
    • 11 months ago
    • Sophos Firewall
    • Discussions
  • Adding new firewalls

    open_admin
    open_admin
    I am adding a new domain controller to our domain and am having trouble adding it to the authentication servers in Sophos. The server is active and working as expected and I've checked all of the same firewall settings as our old DCs. The only difference…
    • 11 months ago
    • Sophos Firewall
    • Discussions
  • How to apply captive portal for specific LAN User

    Aijaz Shaikh
    Aijaz Shaikh
    Hello, i have confiure captive portal page in sophos firewall and created user grp called (TEST_GRP). i have also created rule for lan to wan and under match rule i have selected user group called (TEST_GRP). but right know what happen is the entire…
    • 11 months ago
    • Sophos Firewall
    • Discussions
  • XGS 19.5.3 Build 652 - AD Group members lost

    Ingo Buyny
    Ingo Buyny
    Hello, i am quite new to the XGS Appliance, coming from the UTM. We still facing a lot of problems since the migration, one of that is the user authentication for SSO. The import of the users and the ad groups worked well and most of the useres…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Captive Portal

    Jayesh Auti
    Jayesh Auti
    Hi All, I'm facing issue with captive portal, some of my users are getting error The Connection has Timed out and the server is taking too long to respond. For some users captive portal is popoing automatically but for the some it's getting issue. Thank…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • STAS Not Connecting to Appliance

    Zane Donaldson
    Zane Donaldson
    Hi All, I operated a Sophos installation several years ago and I'm just now recently back administrating a Sophos ecosystem. First issue, I've installed the STAS collector/agent on a domain controller, and configured STAS on the XGS unit. In the…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Sync AD users to Sophos firewall

    Emad Al-qwassmi
    Emad Al-qwassmi
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Do I need STAS?

    Csaba Németh
    Csaba Németh
    Hi there, There is a company (Company1) with 3 sites and an another company (Company2) with 1 site. Company1-1 has 2 AD DCs Company1-2 has 1 AD DC Comapny1-3 has no DC. Company2 has 1 AD DC. There is an AD trust between Company1 and Company2. …
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • stats service error with code 1053 windows server 2003

    Ahmed El Gebaly
    Ahmed El Gebaly
    i have error with stas service error with code 1053 windows server 2003 couldn't be start for first time to join ad to firewall any feedback why sever windows 2003 didn't accept sophos transparent authentication
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Authentication problems after Firmware Upgrade

    Leonardo Mota
    Leonardo Mota
    After upgrading firmware from SFOS 19.0.1 MR 1 BUILD 365 to SFOS 19.5.3 MR3 - BUILD 652, I'm having some problems with Authentication. The STAS is currently updated. Some users are in need to manually authenticate with user and password everytime. What…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Problema de Importación

    Xpertus SOC
    Xpertus SOC
    Buenas tardes Grupo sabrán porqué no me deja seleccionar en el ADDGROUPS, estará mal un Dominio?
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • STAS ignore Live User

    Technik Technik1
    Technik Technik1
    Hi altogether, our customer use a Sophos XGS3100 (SFOS 19.5.3 MR-3-Build652) and we have configured STAS according to best practice. Two DCs with Agent and two member servers with collector. Connection works fine and there is no firewall woh blocks…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Sophos OTP token need to sync after reboot

    Lee Jiaze
    Lee Jiaze
    Hi Everyone, I have a query here, is it we need to sync the otp token when the Sophos XG is done reboot?
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Servers using insecure plaintext connections: 1

    Vaibhav Patil
    Vaibhav Patil
    Hi everyone, We have added AD server with sophos xg 230. And it is showing that "Servers using plaintext connection: 1" in Authentication > Servers . As you can see above. Please tell me solution. Regards, Vaibhav
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • SFOS FIrewall and AD authentication

    Jay23
    Jay23
    Hi Everyone, Sophos UTM user making the move to SFOS firewall and need some help. I am having a diffiecult time getting the settings right to authenticate to Active directory on a new Sophos Firewall. With the Sophos UTM software you entered the Bind…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • View related content throughout Sophos Firewall
  • More
  • Cancel
<>