Sophos Transparent Authentication Suite on multiple DCs

Question

We have multiple DCs. Currently only one of the DC's are the "collector" for STAS. When this DC gets rebooted the users will get white screens because the XG does not see their authentication. 
 Can one setup two DCs as a collector? If so how? 
 Also we plan to upgrade the current collector DC. How does one demote it from being a Collector to being an Agent while it is being upgraded so my users can still use the Internet?

sachingurung · Answer

Hi April, 
 Yes, it is possible. Please take a look at this KB article here: Sophos XG Firewall: How to Implement Clientless SSO with multiple Active Directory Domain Controllers . 
 Any help?

LuCar Toni · Answer

Hi, 
 depends on your setup. 
 Sometimes, i recommend to use only 1 collector and X agents. 
 Sometimes i go with multiple collectors. Depends on the High Availability infrastructure of the customer. 
 Cheers