Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 5 replies
  • Answers 2 answers
  • Subscribers 29 subscribers
  • Views 1568 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Kerberos Authentication in Browser

Manish Chawda

Hi,

In existing environment I am using Sophos XG with Client Authentication being installed in all PC's for accessing Internet.

While surfing on net I came across a configuration wherein I can configure browser for Kerberos Authentication. So by this it means that if I do not install and configure Client Authentication then also one can access internet. ?

I tried by disconnecting Client Authentication and configuring IE (Since chrome uses settings of IE as per net search) with Captive portal configured for Kerberos Authentication, but could not access internet.

Can anyone advise ?

Manish



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Manish Chawda

    You can reference this community post as well. Although in the post they're comparing STAS with kerberos but it'll help you understand some keypoints

    community.sophos.com/.../kerberos-authentication

  • 0 in reply to Packet0wl

    OK!

    Based on the link I had major task configured already only 1-2 were to be done which I did. Now if I open Log viewer and see that from which rule my packets are going after disconnecting the Client Authentication, it goes from DNS rule instead of rule which it should use that was prior used when I was connected using Client Authentication ?

    Apart from the above do I not need to configure in IE / Chrome the following

    4) (Conditional) If you are using Internet Explorer, configure the browser to trust the appliance:

    1. a) Click Tools > Internet Options > Security > Local intranet > Sites > Advanced. In the Add this website to the zone field, enter the Base URL for the appliance, then click Add.
    2. b) In the configuration example, this URL is cloudaccess.com.
    3. c) Click Close, then click OK.
    4. d) Click Tools > Internet Options > Advanced.
    5. e) Verify in the Security section that Enable Integrated Windows Authentication is selected, then click OK.
    6. f) Restart the browser.

    Do I ?

Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?