STAS and User logging not working as expected

Question

Hi all, 
 Hoping someone can point me in the right direction. 
 I have enabled STAS on our Sophos XG. I can see user showing on the STAS Agent on the server. 
 I have also added the server to the XG on the Auth List and connections pass without issue. I have imported the Group "Domain Users" into the XG from the Connected Server. 
 
 Now my issue is when I set my Firewall rule to "match known Users" and select Domain users as the group no traffic flows via this rule, however, if I set the group to "ANY" traffic flows through it as expected. How can I set this rule for domain users only?

Vivek Jagad · Answer

The AD server and the local users are both in the same zone right ?
And all the domain users are present under the group Doman users, right ?
if authentication zone LAN is in the picture, can you ensure the option "client authentication" is enabled under the administration > device access

Here is also the best practice guide you may want to refer - Sophos Firewall: Best practice for STAS