Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 28 subscribers
  • Views 7720 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Active Directory Authentication static or active

LanhamRattan

Is the Active Directory Auth a static or active service, do I have to import every time I make changes to my AD Users or does the XG verify against my AD server?



This thread was automatically locked due to age.
Parents
  • 0
    I want to add a bit more information, as I have a production enviroment with XG310 and AD.

    First: STAS is not so efficient. I have in every workstation Arcserve UDB installed (backup software) that use a standard domain user Backup. Because of this, STAS doesn't work at all, so in my firewall 95% of traffic is reported as user Backup or, if by KB by Cyberoam (Sophos doesn't have this KB!!!) abuto CTAS (STAT by Cyberoam) if I exclude Backup login, firewall report 95% off trafic as N/A, so useless.
    The only solution is to distribute sophos agent to make client do thery login and not use SSO

    Second: Group using. It is dynamic at every logon, only one group is reported (probably the first) and not all the groups of the user. So take note of this

    Third: You can't use group of group. For example, I have a group FW-Users, that would be all the standard users of my company. Inside of this group, for simpler uses, it would be usefull to put the main users groups (so for example if I create a new user and I add it to his OU and relative group, I haven't to add manually also to FW-Users).
    This not works. You must put all the users explicit inside the main group that you want to manage on Firewall.
Reply
  • 0
    I want to add a bit more information, as I have a production enviroment with XG310 and AD.

    First: STAS is not so efficient. I have in every workstation Arcserve UDB installed (backup software) that use a standard domain user Backup. Because of this, STAS doesn't work at all, so in my firewall 95% of traffic is reported as user Backup or, if by KB by Cyberoam (Sophos doesn't have this KB!!!) abuto CTAS (STAT by Cyberoam) if I exclude Backup login, firewall report 95% off trafic as N/A, so useless.
    The only solution is to distribute sophos agent to make client do thery login and not use SSO

    Second: Group using. It is dynamic at every logon, only one group is reported (probably the first) and not all the groups of the user. So take note of this

    Third: You can't use group of group. For example, I have a group FW-Users, that would be all the standard users of my company. Inside of this group, for simpler uses, it would be usefull to put the main users groups (so for example if I create a new user and I add it to his OU and relative group, I haven't to add manually also to FW-Users).
    This not works. You must put all the users explicit inside the main group that you want to manage on Firewall.
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?