Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 30 replies
  • Subscribers 29 subscribers
  • Views 10532 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG detect wrong user group

The Do

Hi everyone,

I'm using SFOS 17.5.7 MR7. I having an issue about user group.
I have Active directory server as a authentication server. I have some group for user where i can apply policy for each. 
This was running fine. But recently I notice some users are associated to wrong group.
For example I'm an IT, I supposed to be in IT group, but Sophos XG put me in Staff group, which is a default group I set in Authentication server list. 
And the most weirdest thing is that although XG put me in Staff group, it applies the IT policy for me. In IT policy, I only put IT group in Identity. 

I checked all the configuration following the KB https://community.sophos.com/kb/en-us/123158 and https://community.sophos.com/kb/en-us/123161 and I'm quite sure I did right.

But I have no idea what's wrong with my XG. Could you please advice?



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Mitko

    So lets wrap up.

    XG can actually work with multiple groups in the backend.

    It will not be displayed in the GUI, but XG knows all User Groups. 

    The Default Group (Primary Group) on XG is for certain points like digest etc.

    But Firewall Policies and Web Filter works with multiple Groups. 

     

    Like you said: 

    And the most weirdest thing is that although XG put me in Staff group, it applies the IT policy for me. In IT policy, I only put IT group in Identity. 

     

     

  • 0 in reply to Mitko

    Thanks for your all response. In AD, i belong to domain users group (primary group) and IT group.