Specify Multiple UPN Suffixes within an LDAP server

Question

Hello, 
 We need to implement AD Authentication into a client's environment, the AD Auth will be used for the Sophos Connect VPN client. Unfortunately, the client has 3 different UPN Suffixes (as they utilise 3 different email domains). Please advise if there is a way to specify multiple UPN suffixes into the "Domain name" field when configuring an Active Directory server on the XG. 
 
 Further to this if it is not possible, are we able to utilise RADIUS to achieve this goal. 
 
 Thank you.

LuCar Toni · Accepted Answer

You can create a workaround for this. Simply create FQDN / DNS hosts on the firewall, which point to your AD IP. (IP1, IP2, IP3 = 192.168.1.1) and then reuse those FQDNs in your screenshot above for each domain.

__________________________________________________________________________________________________________________

LuCar Toni · Answer

Sophos Connect (IPsec) cannot utilize "Backend Member Groups". Only the Primary Group. See: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/125654/backend-group-membership-in-xg-firewall 
 SSLVPN in Sophos Connect works fine for all groups.

Specify Multiple UPN Suffixes within an LDAP server

Top Replies

Submitted a Tech Support Case lately from the Support Portal?