Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 26 subscribers
  • Views 1036 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Radius Authentication for User Portal use only PAP?

MichaelWalter

Hello together,

i am testing the Sophos XG in Version 18 GA 354. Now i want to test the radius implementation with a Windows Server 2012 R2 and NPS. When i try the connection with PAP all is successful but if i turn off PAP in the NPS then i get an error from the NPS-Server (wrong authentication method used).

is there a way to use an encrypted protocol?

 

thanks in advance

michael



This thread was automatically locked due to age.
  • FormerMember
    0 FormerMember

    Hi  


    Could you please let us know which user portal are you refereeing to? Is it authentication page for users to authenticate with the firewall? It would be great if you could share more specific details to your requirement and setup you want to achieve, it would help us to assist you better.

    Thanks,

  • 0 in reply to FormerMember

    Hi H_Patel,

    i mean the portal which i can configure for clientless access in the XG firewall.

    here my steps in the firewall:

     - i configure an authentication server for radius

     - then i create a bookmark for RDP

     - after that i link the bookmark to the clientless access

    for the NPS-Server configuration i do a quick and dirty setup - only check an AD-group Membership and the IP of the sophos.

    when i check the communication between sophos and NPS server it works with PAP. but PAP is insecure and for that reason i want to configure CHAP or something else. So i uncheck PAP at the NPS server side. And here is my Problem. if i try to login in to the userportal i get an error on the NPS server, that say: the authentication method is not configured. On the firewall side i cannot configure an authentication method.

    what do i make worng??

     

    michael