Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 9 replies
  • Subscribers 27 subscribers
  • Views 17666 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

STAS Test connectivity with collector is failing

Arvin Carlos

Hello, 

 

Kindly help me please, I have configured our AD with STAS 2.2.1.0, in Sophos applicance on the general tab our  XG430 is appearing, but when I test the connecvity using the STAS collector, it is failing...the AD is already define on the our XG for STAS activation,  also and the  Windows  AD firewall is off, but still I cannot make it work. is there any XG firewall rule to define?...the AD is in the local subnet with our XG...

 

 



This thread was automatically locked due to age.
Parents
  • 0

    Arvin,

    make sure that STAS agent is up and running and that proper ports between the 2 DC are open. Check Windows Firewall.

    Regards

  • 0 in reply to lferrara

    thanks, Windows firewall is off for isolation, but still STAS collector (sophos XG) testing  always failed... I already enable the STAS using the console from the XG but it is still failing...is there any logs i can see from the console or GUI that our AD is synchronizing to the XG? 

  • 0 in reply to Arvin Carlos

    HI

    192.168.10.254 is your firewall: you can not test WMI, only PC-Client you can test in WMI.

    You can check WMI: from Domain Controller where STAS is installed, verify WMI using command line:


    Open the Command Prompt and execute the following commands:

    C:\WINDOWS>wmic

    wmic:root\cli>/user: <DOMAIN>\administrator
    Enter the password :********
    wmic:root\cli>/node: <IP-ClientPC>
    wmic:root\cli>computersystem get username /value

    If this test return username logged in in remote PC -> WMI is OK: uninstall and then re-install STAS

  • 0 in reply to GabrieleD

    thanks for the reply...

     

    WMI Test return from ad server;

     

    wmic:root\cli>computersystem get username /value


    UserName=ALDAHANCO\carlosa

     

     

    So STAS config is alrigh in the first place....so do you mean  the STAS collector connectivity  is for another AD agent collector not a sophos appliance? thats why test is failing?...maybe in the first place I do that STA running but this test collector field is confusing me....I guess?

  • 0 in reply to Arvin Carlos

    The user account used for STAS Service is member of Domain Admins ?

    Have you uninstalled STAS from AD and the reinstall?

    I had a similar situation that I solved by reinstalling STAS...

  • 0 in reply to GabrieleD

    Hi, the account is a domain admin, try uninstall and re-install for a couple of times but the test connectivity is still failing, but when I point the testing to another AD collector/agent, the test will be a success, there is something on the XG that our AD cannot successfully test connect as a collector, but when you test as a "sophos applicance" it will be a success which is so confusing if I did it right or wrong....

  • 0 in reply to Arvin Carlos

    I'm sorry, but at this point I suggest you open a ticket with Sophos support.

    Bye

Reply Children
  • 0 in reply to GabrieleD

    Thank you for all the effort, we resolve the issue, kudos to the author, attention Sophos, maybe it time to revised the knowledgebase for STAS, include the very basics is so helpful for trobule isolation.....

     

     

     

    community.sophos.com/.../troubleshooting-guide-for-xg

     

    #8- STAS
     
    One of the smallest configuration mistakes while configuring STAS is the TIME. The time difference between the XG firewall and the Domain Controller should not be more than 5 minutes. When the STAS logs have the user information but the user is not authenticated on the XG firewall & the live user UI is not populated with the User, then this could be related to the time settings.