This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Group Authentication

Hi All

I have sophos XG firewall 210 V17.5 and i use STAS for authentication. I create three different user groups and add users to these groups accordingly. My problem is when the user logins automatically sophos adds to his default group which is the active directory OU=userou,DC=... group and i can't create the different policies based on the group how can i solve this or is there any other way to do please anyone help?

This thread was automatically locked due to age.

0 FormerMember over 5 years ago
Hi Ihenock

Thank you for reaching out to the Community!

I would advise you to check the following Community post and KBA for more info:

https://community.sophos.com/products/xg-firewall/f/authentication/76786/why-do-domain-users-fall-into-open-group.

Group membership behavior with Active Directory

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Ihenock over 5 years ago in reply to FormerMember

Hello

Based on the below link it says "To resolve this issue, create another global Security Group, such as 'XG Domain Users', and add all users from 'Domain Users'." so where do i create those users in Active Directory or Sophos ?

community.sophos.com/.../why-do-domain-users-fall-into-open-group
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 5 years ago in reply to Ihenock

Hi Ihenock

You have to create security groups in your AD server and then import them on the XG firewall by following this KBA: Sophos Firewall: How to import Active Directory OUs and groups.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Ihenock over 5 years ago in reply to FormerMember

Hi H_Patel

i creaate a security group and in the members section i add "Domain Users" and import the security group i created however when i try to login it falls under the default group
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to Ihenock

What if: You import all your needed groups from your AD (via Import feature in XG).

Then you select those Groups in Firewall / Web filter.

Even if the group is Empty on XG, will it still work as expected (For example SSH for IT Admin Group can use this firewall rule?)
Cancel
Vote Up 0 Vote Down

Cancel