This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unidentified User

Hi, I am newbie in UTM firewall, I have setup my Sophos device to use captive portal method for authentication. But whenever I see user web report, there is unidentified user also I don't know how to check or identify it. My web user report image is attached. Kindly help please.

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 7 years ago

Hi,

you have chosen one report to look at. Please login to the GUI and review the diagnostics - reports or the report section or even the log viewer.

Some of these will show you the IP address of the device with the large download.

Please post your firewall rules because the issue might be you are allowing your XG to be a internet relay?

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 myb over 7 years ago in reply to rfcat_vk

Thank you for your help, I have different reports and also checked log, but could not figure it out. Here is my firewall rules.
Cancel
Vote Up 0 Vote Down

Cancel
0 Huy Vu over 7 years ago in reply to myb

Hi myb,

Are you using authentication with local account or integrate 3rd service? Can you show authentication configure (authentication server, authentication service,...)
Cancel
Vote Up 0 Vote Down

Cancel
0 myb over 7 years ago in reply to Huy Vu

I use only local method with captive portal.
Cancel
Vote Up 0 Vote Down

Cancel
0 Huy Vu over 7 years ago in reply to myb

Rule's ID 9, please delete. This rule allow all traffic and don't match user.
Cancel
Vote Up 0 Vote Down

Cancel
0 myb over 7 years ago in reply to Huy Vu

OK, but don't match user in which rule?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 7 years ago in reply to myb

Hi,

you need to delete rule 9 as posted above or tighten user access to rule 9.

You are only blocking p2p, not proxies.

Ian
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 7 years ago in reply to myb

Hi,

you need to delete rule 9 as posted above or tighten user access to rule 9.

You are only blocking p2p, not proxies.

Ian
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data