Will Sophos Authentication for Thinclients also work/be supported?

SATC will not be in the v9.4 release, nor will the RADIUS accounting. v9.4 will just get STAS for now... AlanT has some plans for the next couple of UTM versions, I'm lobbying hard to get RADIUS accounting in at the very least...

However, RDP/Citrix sessions can be handled per user if you set a Web Protection Profile that matches only the hosts of your RDP/Citrix servers and forces STANDARD proxy mode. Then using Group Policy to set proxy settings onto the browsers for those server will show per user sessions.

Hi quasar3c279,

as AzRoN already told, STAC will not be part of UTM 9.4 - at least in the first step. Discussion about next step within the authentication world (STAS, SATC,..) are still in progress.

I hope this answers you questions.

Greetings
Holger

For proxy aware applications in RDP/Citrix environments this is not a problem. But SATC would be great for applications not working with the proxy. Maybe in the next release! ;)

Thanks for your answers...

Checking the latest 9.4 Sophos UTM, I could check that the Sophos STAS is very similar to the Cyberoam CTAS.

So my question is: Would be the Cyberoam CTAC (Thin Client agent) be compatible with Sophos UTM v9.4?

If not, there is no way currently to authenticate Windows Terminal Server users in Sophos UTM configured in transparent mode?

Best Regards,

William.

hi William,

STAS and also thin client is based on cyberraom implementation. You should use SATC client - terminal server client for authentication.

Greetings

Holger

Dear Holger,

SATC still has not been implemented in latest Sophos UTM version correct? I was thinking a way to use terminal server client in the meanwhile so I've asked about to use the Cyberooam CTAC.

Is it possible to download SATC and use if right now? Is it available in some beta version so UTM can recognize its authentication?

Best Regards,

No, the Thin Client authentication suite is not available for UTM yet.

As mentioned previously, if you force a proxy setting on the terminal server browser that clients use, this will then perform standard proxy (authenticating all requests) function.  As such, each user can be detected and correct policies applied.  

I typically make a proxy profile, standard mode, and only associate my TS/Citrix Host systems to the profile.

Hi William,

you can also use transparent mode AD sso for Web Proxy. This is working, but standard mode is the better solution. If you can't set up a standard proxy, you have also the option to use a proxy.pac file for automatic proxy settings.

Regards

mod