Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 17 replies
  • Subscribers 29 subscribers
  • Views 30145 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

STAS user disconnect after 2 minutes

Tam Ben-Jusu

I have a Windows AD domain with 1 domain controller.

I have an AD user that logs in, appears in STAS and has WAN access. Within 2 minutes that user is disconnected and drops out of Show Live Users.

The XG230 shows a successful log-out of that user even when they haven't log out.

The user then gets presented with the Captive Portal.

All tests to the client from the STAS are successful, WMI polling, pinging, etc (The firewall is off on the clients).

All tests between the Sophos Agent and Collector are successful (they are on the same domain controller)

All test between the Collector and the XG230 are successful.

Has anyone else experienced this?

 



This thread was automatically locked due to age.
Parents
  • 0

    Hi

    Can you check if you Enabled User Inactivity in "Sophos Transparent Authentication Suite Setting" ?

    There are "Terminal Servers" that are not specified into IP Exception in Sophos STAS Suite?

    When you see log-out of that users on "Current Activities" from "Monitor & Analyze" what you see in "Show Live Users" in STAS Suite?

    Can you check UDP 6060 on DC where STAS is Installed?

    STAS service account is member of "Domani Admins" or member of group that can run "remote WMI request"?

  • 0 in reply to GabrieleD

    Thank you, GabrieleD...

    In STAS 'Enable Log Off Detection' is enabled. I have tried with 'WMI Polling' and 'Ping'. Dead entry timeout was disabled (set to 0) and is now set to 10hours.

    I have 1 Terminal Server and it's IP address is set as an Exclusion in STAS. 

    When the XG log shows the user as logged-out the user also disappears from STAS "Show Live Users".

    A tcpdump 'port 6060' command on the XG shows traffic IN & OUT between the XG and the DC.

    Many thanks again for your help.

Reply
  • 0 in reply to GabrieleD

    Thank you, GabrieleD...

    In STAS 'Enable Log Off Detection' is enabled. I have tried with 'WMI Polling' and 'Ping'. Dead entry timeout was disabled (set to 0) and is now set to 10hours.

    I have 1 Terminal Server and it's IP address is set as an Exclusion in STAS. 

    When the XG log shows the user as logged-out the user also disappears from STAS "Show Live Users".

    A tcpdump 'port 6060' command on the XG shows traffic IN & OUT between the XG and the DC.

    Many thanks again for your help.

Children
No Data