User Portal Query

Hello Louis,

Thank you for contacting the Sophos Community.

How are you authenticating to the Firewall and what policies are being applied to your user?

Regards,

Hi there, thank you for your response.

I haven't yet implemented an authentication method.

Which route do I have to take in this aspect?

STAs/NTLM or something else, ideally for single sign on

Hello Louis,

It would depend on the number of users in your organization.

NTLM and STAS are both good options, it would depend on the number of users.

I would try with NTLM first and then move to STAS.

Make sure not to configure both types of authentication for the same segment as it might cause authentication issues.

• NTLM
• STAS
• STAS best practices

Regards,

Hi there, thank you for the advice.

Today made a bit of progress whereby I authenticate users using LDAP. However still getting a cert error even though I have imported the CA

Also another question Is the active directory authentication method soley for being able to import groups?

I have been really struggling understanding as this is my first project where I am dealing with true networking etc. Before this I was doing a lot of user support, glad to be able to take the set up, but still got a huge mountain to climb

Hi Emmosophos, I am using the default certificate rather than the Security Appliance SSL CA

I am not too sure if that matters, the default works perfect for me, but if I change to the latter I get certificate error.

I have made sure both are in the trusted root

Hi Emmosophos, I am using the default certificate rather than the Security Appliance SSL CA

I am not too sure if that matters, the default works perfect for me, but if I change to the latter I get certificate error.

I have made sure both are in the trusted root

Hello Louis,

I replied to your PM, but yes the one you need to install is the SSL CA certificate.

https://support.sophos.com/support/s/article/KB-000035645?language=en_US

If the issue persists, check what is the certificate that it’s being presented when the issue happens.

Regards,