STAS Configuration

Hi Paul,

After implementing STAS on the AD Server, you can integrate it with SF by following the steps below.

Step 1: Configure SF to use Active Directory as Authentication Server.

Refer to the article How to Integrate Sophos Firewall with Active Directory for detailed instructions.

Step 2: Configure a Collector Port and Group in SF

Log in to the SF CLI using an Administrator profile.

Go to Option 4. Device Console.

Execute the following command to enable Sophos Transparent Authentication.

console> system auth cta enable

Execute the following commands to add a collector IP and a collector port, as well as create a collector group.

console> system auth cta collector add collector-ip <ip-address> collector-port <port> create-new-collector-group

Hope that helps :)

Thanks Sachin, I believe I have done the CLI part. However, is there a way to check? or is it ok to rerun the CLI command again without issue?

thanks for you help.

Use "system auth cta show".

Here's a copy of the ouput. Does this look correct?

Sophos Firmware Version SFOS 15.01.0 MR-2

console> system auth cta show

  CTA Status              : enable

  CTA Collector           : enable

  Unauth-Traffic Drop Time: 120 sec

  ============================================================

  Collector IP       : Collector Port       : Collector Group

  ------------------------------------------------------------

    192.168.0.11     : 6677                 :         1

  =========================================

  VPN Source Network : VPN Source Netmask

  -----------------------------------------​

Hi, 

That looks good. What is the error and when you do face it. Please post some screenshots.

Thanks

Hi, 

That looks good. What is the error and when you do face it. Please post some screenshots.

Thanks

Not sure if this is correct way, but here is a screenshot in a Word doc of the error I get when I test connectivity to Sophos from STAS

4478.Doc8.docx

Hi,

Did you install STAS with super admin privilages? Is STAS enable on Sophos UTM? To use STAS, it first must be enabled and a collector machine has to defined. To enable STAS, proceed as follows:

1. Navigate to Definition & Users > Client Authentication. 

2. Switch to the Sophos Transparent Authentication Suite tab. 

3. Under "STAS Status", activate the toggle switch.

4. Click New STAS Collector.

5. As port, select STAS Collector.

6. Fill in the remaining fields as described in the online help of the WebAdmin console.

Hope that helps:)