This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos proxy reporting wrong user

Hi all,

Came across a strange issue today and wondered if anyone had any ideas.

I have been asked to set up a training environment in Citrix which allows access to just one website. Within Sophos proxy I have blocked all categories and allowed just the single website that we require. When testing this, I found that my internet lockdown wasn't working. On testing, it seems the Sophos proxy is logging the internet usage under the name of a different user on the same Citrix server. I tested this by submitting an access request for a blocked website, which came through with another users name on it.

How can this happen, and how can it be resolved? Each Citrix server has 30-40 users on it, and i'm now worried that we may have provided internet usage reports to HR containing incorrect information.

Regards,

Andy

:53235


This thread was automatically locked due to age.
  • Do you happen to be using Sophos Anti-virus as well? We ran into the same issue. After turning on Web Protection on the Sophos Client, and linking it to the Web Appliance, we were then able to get correct reports/policies to apply.

    :53239
  • Thanks. Yes we are. I guess that may get me around the problem. We don't currently have web control turned on in the client, but I guess I could drop the policy on to the Citrix servers.

    It's a work around rather than a fix though, as it should be working fine as it is.

    :53243
  • are your users are sharing the same ip in citrix? you may run into issues like this I think.. used to have the same issue on our TS server until MS decided to let people use ip ranges rather then making everyone shar ethe same ip.. was quite anoying.

    :53533
  • Same problem here

    solved by enabling the "Authenticate all request. The appliance must be deployed in explicit mode" option (System --> Authentication --> Default Settings)

    Make sure your proxy is running in explicit mode (Network Interface --> Deployment Mode setting)

    :55442