Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 26 subscribers
  • Views 492 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG Firewall IPSec VPN Groups

Sophos User3975

Hi

We are using Sophos VPN client (IPSec remote access) and I have created a group inside the Firewall (not synced from AD) and give it access to the IPSec remote

The problem is that I am adding accounts in the group, save it and shortly after that when I check - accounts are not there

Has anyone experienced the same ? Why would that happen ?

Thanks



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to Sophos Community.

    Are you adding local users or AD users to the custom group?

    XG fetches the user information from the AD along with his group association. So if the OU has same group name as XG and AD, then the user will fall under the associated group. If XG doesn't have a group imported then the user will fall under the default group configured.

    As XG supports tight integration, when you add AD users to the custom group they'll be reverted back to the original associated AD group after the next successful authentication attempt.

Reply
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to Sophos Community.

    Are you adding local users or AD users to the custom group?

    XG fetches the user information from the AD along with his group association. So if the OU has same group name as XG and AD, then the user will fall under the associated group. If XG doesn't have a group imported then the user will fall under the default group configured.

    As XG supports tight integration, when you add AD users to the custom group they'll be reverted back to the original associated AD group after the next successful authentication attempt.

Children
No Data