Sophos Transparent Authentication Suite (STAS) with Windows server 2012

Hi All,

make sure you follow carefully the documentation available here:

https://www.sophos.com/en-us/support/knowledgebase/123156.aspx

and at the bottom of the page follow the other links, which are:

https://www.sophos.com/en-us/support/knowledgebase/123155.aspx

and then

https://www.sophos.com/en-us/support/knowledgebase/123158.aspx

Also make sure to open proper ports on Windows Firewall DC to allow communication between XG and DC. If you need to track logout through WMI, other Windows Firewall rules are needed from Worstation to DC (where the STAS agent is installed).

Here a WMI third-party article:

http://www.hammer-software.com/wmigphowto.shtml

I have installed it several times with no issue. Reply here if have followed all the documentation.

In the first article you posted, at the end are these steps:

1. Execute the following command to enable Sophos Transparent Authentication.

1. Execute the following commands to add a collector IP and a collector port, as well as create a collector group.

console> system auth cta collector add collector-ip  <ip-address> collector-port <port> create-new-collector-group

Now for the last line, I would assume the IP address to be the IP of the Active Directory DC, but what is supposed to be the collector port?  6677 or 5566?  Wish this article had a proper example using IP addresses and ports already being used in the example.

In the first article you posted, at the end are these steps:

1. Execute the following command to enable Sophos Transparent Authentication.

1. Execute the following commands to add a collector IP and a collector port, as well as create a collector group.

console> system auth cta collector add collector-ip  <ip-address> collector-port <port> create-new-collector-group

Now for the last line, I would assume the IP address to be the IP of the Active Directory DC, but what is supposed to be the collector port?  6677 or 5566?  Wish this article had a proper example using IP addresses and ports already being used in the example.

When I used the IP of the DC and port 6677 the test worked, so I'm guessing that's correct.

So after this is set up will I start seeing User objects being created automatically in the Sophos XG firewall?