This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

STAS users randomly disconnecting

STAS users keep disconnecting and have done since I purchased the 2 XG230 units. I've had a support ticket open since Feb 2018.

All tests in STAS (WMI, Reg, Agent, Collector) show as successful.

Live users appear in STAS and then randomly drop off, anywhere between 4min-4hrs.

Recently added another domain controller running the Sophos STAS agent. Any clients authenticated against that DC, in 'Show Live Users', display the XG's ip address?!

Then, suddenly appear again (twice) with the correct IP address and then drop off.

Any advise would be greatly appreciated.

Cheers



This thread was automatically locked due to age.
  • Where do I get STAS 2.2.3.0?

    Regards, Jelle

    Sophos XG210-HA (SFOS 18.0.4) on SG210 appliances with Sandstorm and 1x AP55
    Sophos Central with Intercept X Advanced, Device Encryption, Phish Threat, Mobile Control Advanced

    If a post solves your question use the 'This helped me' link.

  • Directly from XG firewall with new firmware... Found it on my own.

    Regards, Jelle

    Sophos XG210-HA (SFOS 18.0.4) on SG210 appliances with Sandstorm and 1x AP55
    Sophos Central with Intercept X Advanced, Device Encryption, Phish Threat, Mobile Control Advanced

    If a post solves your question use the 'This helped me' link.

  • Thanks for that, I'm on 2.2.1 as well, so hopefully this new one with help.  For a new XG user, can you explain me to the difference between the Single Sign on Client vs STAS vs the authentication clients?  Obviously there's a client to deploy, but I'd like to know more of any implications, pros vs cons.  Given how terrible STAS has been for us, I'm not opposed to deploying a client if it improves the reliability of authenticating my users.

  • Thanks for the info.  I installed 2.2.3.0, however, it did not changed anything ...

    Paul Jr 

  • Thanks LuCar..

     

    I've upgraded to 2.2.3 and things have got worse.

    Even less users are in Show Live Users.

    A 2nd DC I have running the Sophos Agent cannot WMI poll any clients even though it worked fine before the upgrade.

     

  • Same here. Only one of two DCs reports to XG although configuration didn't change and seems to be correct. STAS on second DC shows no endpoint it reports to.

    Regards, Jelle

    Sophos XG210-HA (SFOS 18.0.4) on SG210 appliances with Sandstorm and 1x AP55
    Sophos Central with Intercept X Advanced, Device Encryption, Phish Threat, Mobile Control Advanced

    If a post solves your question use the 'This helped me' link.

  • Sorry to hear that, Jelle.

    I now have no users in Show Live Users, even if they are authenticated against the same DC running as the Collector and an Event 4768 showing in the Windows logs.

    The upgrade has totally banjaxed STAS which didn't work before.!!!

     

     

  • I have taken STAS back to 2.2.1 and domain users immediately started appearing in STAS again.

    I would rather have them appear in STAS, and randomly drop out, than not to appear at all - hahahahaha.

    What a joke.!!

     

  • I am still wondering, do you have any Case ID with support and is somebody currently working on your topic? 

    I mean, this should work fine. Installed STAS in multi domain yesterday and works fine without any drops and/or logoffs... 

    __________________________________________________________________________________________________________________

  • I am having the same issue after setting up STAS yesterday. Looking at client event logs led me to the Netlogon service.  The service was somehow set to "Manual".  Setting it to automatic and starting the service has so far kept be up and connected for the last several hours.  I was dropping every 5-10 min.