Hi there, I have just stumbled up on an issue - on our XG a handful of users (not all) are being created as what looks like "local" users on the XG. Normally users are STAS'd and compared to their AD account and registered with their "account@account…

CVE-2020-1472 Zerologon is about to go into the wild. Is XG able to detect those logon attacks with IPS?

Hey, following Problem: I have a Active Directory group "G-SSL-IT". In this group are other groups ( e.g. IT, Support etc.) . In XG i´ve imported the group "G-SSL-IT". In AD I manage the users only in the sub-groups. For Example: Bob --> G-IT…

I recently installed Sophos XG 125/ w125 on our network. After installation I have been receiving the “Certificated is not valid” error when trying to open the outlook application. I am using Exchange 2010 and previously when I was using TMG I did not…

Good Evening, I recently joined a team and started up our own MSP. One of the clients we took over is using a Sophos XG210 (SFOS 17.0.3 MR-3). I am not real familiar with Sophos, though this same unit died and was RMA'd largely in part due to someone…

Dear all, I have installed stas and integrated AD with xg310. Then i did import all the users from AD into Xg-310. And created a firewall rule to access internet from lan to wan and enabled "match known users" & "Captive portal to unknown users…

My Client have two domain(A and B)and trust relation have been established between them. Both Domain have same subnet and both are connected with Sophos XG. All work fine, now I want to configure user base rules for both domains in a XG firewall.…

hello everyone here iam still trying to configure all rules i need to apply on my work environment i have read that i can setup my AD as authentication server to let users access the internet but i couldn't make it work and i hoped to figure out…

Greetings, Trust you are doing well, I am working on XG integration with AD user groups and OUs. I was able to setup STAS and configure it. But now, before make it running, I want to understand one thing. The user will be authenticated when he/she…

Hi all, we have XG-310 (FW: HW-SFOS_16.05.6_MR-6.SF300-266) with some REDs setup as a trial. This works as intended but we have some trouble with the AD connection. We have a root-domain and a subdomain for each subsidiary. We have a global security…

Greetings, Trust you are doing well, I am trying to add my Active Directory to Sophos XG 230 as an Authentication Server. But, I am keep getting that the credentials are wrong. What are the possible solutions/causes for such issue?! Is there any…

Hi all, I did configure STAS on a single DC. Communication between XG and DC it's working but some users didn't show up in the firewall. This means the firewall rules don't apply to him. AD Server: 128.128.128.28 XG appliance: 192.168.50.1 …

After a year, I've decided to try Sophos XG again. Currently using UTM 9.5 - which has its issues, but works well. I am trying to find out how to force all web requests through the proxy port. Sadly, I'm not getting far with Sophos XG. If I add a…

Hi all, I have setup a 210 with XG and STAS, I want to sync the users from the AD groups, I follow some guides but I can't see any user in any groups. I read some posts about this and they say all the users had to login into user portal so the XG…

Hello everyone I try to configure my Sophos for the AD authentication. What I want is when a user open is computer and is browser, the Sophos know who is it so I can log what he does. But I don't really understand, I install SSO client one one…

Hi, my problem is in the DC Server the event log show in tha last hour 10210 log of event id 10028, for me it's too many. Please, help me, how can i resolve this or what trigger this. Thanks

Hello I Have a Sophos XG210 firewall with 16.05.1 MR-1 firmware, i have configured AD Server for uses authentification, and activated NTLM in device access on LAN , but when user open new windows session it's prompted do longin again when openning…

Hi all, We have CR100ING at a customer site (with sophos fw:16.05.0.GA). We are experincing problem. Active Directory sync is working without a problem on Ethernet. Users can go online with SSO authentication. When same user disconnects from Ethernet…

Good Afternoon everyone, Been working with the new XG's over the past couple of months and have an (what I hope is an easy/minor) issue with Portal and VPN access w/AD integration. Wondering if I could get a little additional help. Scenario: Basic…

Hi, I mount a VirtualLab with VM's with XG v16 on my workstation 3 VM's UTM, Windows 7 Pro 64bit and Windows Server 2008 R2 64bit... XG v16 with two interfaces LAN VMnet5 172.16.16.16 WAN VMnet2 (NAT) DHCP Windows 7 Workstatin LAN VMnet5 gets…

I have imported my groups from the AD in my XG environment, but when I try to login I just get login errors. When I look at the logs it seems like XG can't get the information from the AD. At the moment I dont know what the issue might be. The last…

We're trying to switch over to XG from UTM Home 9.4 after encountering an unresolvable problem which requires us to discontinue use of the product. I decided XG Home might be a good alternative... Until it became apparent that it can't seem to do an…

Hi Guys. I've been experiencing issues with STAS, mainly to do with multi-homed clients (laptops plugged in via LAN and also on wireless). Anyway, to try and get around this issue I've been attempting to get the SSO Agent working on these devices instead…

HI all, i have two questions: 1.what is the difference in authentication server AD and LDAP. it seems to work in the same way. 2. there's a way to depth troubleshooting authentication from Shell? anyone know what are the log files in /etc/tslog that refer…