Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 5 subscribers
  • Views 468 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Webfilter: User arent authenticated

Felix626

Hello,

we have a Sophos UTM in use and have STAS installed on both domain controllers and configured accordingly on the Sophos.
However, the web filter shows when the clients are surfing only
user=""
So the user data is not entered, so the users are not authenticated.
So all web requests are applied to the default content filter.

What can be the reason for this ?



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to Sophos Community.

    Could you please confirm whether live users are visible on STAS application? (Go to Advanced > Show Live Users)

    Also, please verify that audit events with 672 or 4768 IDs are getting generated on AD(event ID 672 for windows 2003 server and 4768 for windows 2008 and above).

    STAS sends user details to UTM on port 6060 and UTM sends user map requests to AD on port 6677. Check tcpdump in advanced shell with the below command.

    utm:/root # tcpdump port 6677 or 6060

  • 0 in reply to FormerMember

    Hi, 

    just tested. Yep users are shown in stas and there are Traffic in tcpdump at Login. 

Reply Children
No Data
Unfiltered HTML