Sophos Transparent Authentication Suite (STAS) with Windows server 2012

Question

Hi, 
 
 I don't know if anyone face a problem wit STAS agent we have the DC it was running on Server 2008 and the STAS agent was installed and working without any problem we upgrade the OS to Win Server 2012 after the upgrading the STAS can successfully connect the XG but when Im testing the STAS collector it showing test connection failed. 
 anyone have any idea about this issue 
 
 Sophos Test: 
 
 STAS collector Test:

lferrara · Answer

Hi All, 
 make sure you follow carefully the documentation available here: 
 https://www.sophos.com/en-us/support/knowledgebase/123156.aspx 
 and at the bottom of the page follow the other links, which are: 
 https://www.sophos.com/en-us/support/knowledgebase/123155.aspx 
 and then 
 https://www.sophos.com/en-us/support/knowledgebase/123158.aspx 
 
 Also make sure to open proper ports on Windows Firewall DC to allow communication between XG and DC. If you need to track logout through WMI, other Windows Firewall rules are needed from Worstation to DC (where the STAS agent is installed). 
 Here a WMI third-party article: 
 http://www.hammer-software.com/wmigphowto.shtml 
 I have installed it several times with no issue. Reply here if have followed all the documentation.

sachingurung · Answer

Hi Ramy, 
 STAS configuration on Active Directory requires certain ports to be open for connectivity between XG and the AD-DC server. STAS Collector installed on the AD-DC server listens on UDP Port 6677 from XG and sends Logon details back on UDP Port 6060. Thus ports to be verified: 
 Inbound UDP 6677 
 Outbound UDP 6060 
 Inbound & Outbound both ways TCP 5566 
 
 Thus, the Local Firewall on the Active Directory requires the mentioned ports to be open for successful connectivity. If that doesn&rsquo;t resolves the query ask the customer to reinstall STAS with Admin privileges and test the working. 
 Thanks

LuCar Toni · Answer

On Client site you have to use a WMI Exception. 
 https://community.sophos.com/kb/en-us/123020 
 This KBA shows a GPO, which are create a firewall exception for WMI.