Advisory: Support Portal Maintenance. Login is currently unavailable, more info available here.
I just configured New AD Server windows 2019. I configured users on sophos for vpn remote access.
For downloading the client certificate , when I try to logon to Sophos portal it fails
On windows side i can see successful log on and immediated log off means credentials are correct
on sophos side it is saying access denied due to invalid credentials. Please help.
Hi Ashish Gupta, Thanks for reaching out to Sophos Community.
Make sure that you're AD server is selected under SSL VPN Authentication methods.Verify this by navigating to Authentication > Services…
Make sure that you're AD server is selected under SSL VPN Authentication methods.Verify this by navigating to Authentication > Services > SSL VPN authentication methods. If the AD server is not selected, then select it, save the config and attempt to login again.
Hi, please be shure not to have special characters in username. Or blanks in the password. First Try a new user with such username and credentials.
Have you enabled LDAP with SSL?
It is configured in SSL VPN Authentication methods.
it is going to AD Server I can see log on and log off there but some how in log files it is saying due to invalid credentials, Do I have to create a user in sophos?
there is no special character or blank in password. I created new username. Yes it is enabled.
OK, this was just to test if it is because of special characters.
Second you could of course try it with native LDAP without SSL but I guess the issue is somewhere else.
You have imported some Groups with the Import group wizard and can see these groups and containing users then in XG?
You do not need to create users on XG manually.
Is the access to those services enabled here? This is essential.
Then please post the logs where you see the login failure with invalid credentials.
Hi,
make sure that thedefault certificate has been configured correctly.
Certificates -> Certificate authorities -> Default -> Edit
Regards
Thank you all for your support. I found the error , FQDN in server settings was wrong, I put . instead of comma and hence error was happening. All I am not clear if distinguished name was not okay how it was connecting with Windows Server. But thank you all for help.