Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 25 subscribers
  • Views 1549 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Users not logged out after closing browser window

Kushan Wijayasuriya

An XG 450 with firmware SFOS 17.5.9 MR-9. 

I have configured the captive portal as shown in the image attached

Accordingly users should be logged out if the browser window through which they logged in is closed. However users are not logged off as expected.

I should mention that this happens only once every few logins. However it is critical that users are logged off IMMEDIATELY after they close the browser.



This thread was automatically locked due to age.
Parents
  • 0

    Kushan,

    does this happen with the same browser?

    Did you try to clear the cache on the affected users?

    How is the firewall rule configured?

  • 0 in reply to lferrara

    Hi Luke, thanks for the reply

     

    does this happen with the same browser?

    Yes. With both Mozilla Firefox and Chrome. This is mostly noticeable in the latter.

     

    Did you try to clear the cache on the affected users?

    We've tried the following:

    1. Clearing the cache.

    2. Resetting Chrome

    3. Reinstalling Chrome

    4. Trying with a different version of Chrome

     

    However the problem persists at random intervals.

     

    How is the firewall rule configured?

    Its group based. Where each group tries to match users from individual group lists.

    Eg: GroupC - match known users from GroupC

    Note: the Groups were imported from an Active Directory.

  • 0 in reply to Kushan Wijayasuriya

    Hi Everyone,

    Sophos support has concluded that this issue is with the latest release of the Chrome browser. Chrome releases after 75.0.3770. does not seem to send the request code 94 form the browser to the firewall indicating the log-off of a user once the browser is closed. 

    Suggested fixes were:

    1. To install the aforementioned version of Chrome (or earlier) or

    2. To enable a feature flag in the Chrome browser to enable the feature again.

           1. In browser type URL chrome://flags/
           2. Find policy flag 'AllowSyncXHRInPageDismissal' and ENABLE it
           3. RELAUNCH the browser and test the user logout, it should work

    3. Use the time based logout mechanism and also authentication agent which is for Windows OS could be used as a workaround.

    They also mentioned this issue will be addressed in verion 17.5 MR12 release. 

     

    Thanks.

Reply
  • 0 in reply to Kushan Wijayasuriya

    Hi Everyone,

    Sophos support has concluded that this issue is with the latest release of the Chrome browser. Chrome releases after 75.0.3770. does not seem to send the request code 94 form the browser to the firewall indicating the log-off of a user once the browser is closed. 

    Suggested fixes were:

    1. To install the aforementioned version of Chrome (or earlier) or

    2. To enable a feature flag in the Chrome browser to enable the feature again.

           1. In browser type URL chrome://flags/
           2. Find policy flag 'AllowSyncXHRInPageDismissal' and ENABLE it
           3. RELAUNCH the browser and test the user logout, it should work

    3. Use the time based logout mechanism and also authentication agent which is for Windows OS could be used as a workaround.

    They also mentioned this issue will be addressed in verion 17.5 MR12 release. 

     

    Thanks.

Children
No Data