OTP / 2FA "Sophos SF0" issue with multiple XG Firewalls on Reiner SCT G1

Whats the Hostname of this Appliance? 

FQDN like

XG1: xxxxxxxx.xxxxx-xxxxx.de

XG2: xxxxxxx2.xxxxx-xxxxx.de

Wondering, my Sophos Intercept X app does it correctly. So maybe the vendor of your app does read the wrong value in the QR Code? 

Because the QR Code rawr format is: otpauth://totp/Email of User ?secret=suer=Sophos%20SFOS&period=30

I assume, the QR Code Tool only Reads: Sophos SFO 

It should use the Creds of the UPN in front of the secret. 

Wondering, my Sophos Intercept X app does it correctly. So maybe the vendor of your app does read the wrong value in the QR Code? 

Because the QR Code rawr format is: otpauth://totp/Email of User ?secret=suer=Sophos%20SFOS&period=30

I assume, the QR Code Tool only Reads: Sophos SFO 

It should use the Creds of the UPN in front of the secret. 

thanks for the explanation!

I think generally it is OK to use the hostname or systemname. The email or user is probably used multiple times on some systems and this would cause the same trouble on that device.

e.g. Sophos Central is just shown as "Sophos" on the authenticator.

it has to be noted, that the authenticator has limited display length, not comparable to an smartphone app.

So if we can hack that information Sophos SF0 somewhere, that would be really cool.

You could generate your own QR Codes. Simply scan your QR Code and change the Sophos SFOS to your name. 

But i assume, this cannot be changed in the System itself. 

LuCar Toni said:

Simply scan your QR Code and change the Sophos SFOS to your name.

any suggestion ho wto do that? a specific software?

There are plenty of Tools only/offline available. 
You need to decode the QR Code, which is not that hard (PS: You are working with secrets, so consider to work with something you trust or is offline). 

Then convert it back to a new QR Code. QR Code is actually a simple "Language" of code. So plenty tools can en / decode. 

sure. thanks for your tips!