Hi Gavin,

Have you set up your AD(s) which have the sso suite installed on as authentication servers?

If so, can you share their setup?

Emile

I have and, its was in the picture that i shared in first post, the one with GREEN that show successful, but here is the setup info :

Gavin,

I had a similar issue on XG and STAS and the problem was the Firewall rules. Make sure to open the proper ports in the right directions.

Use tcpdump to see if the proper port from/to xg are opened.

Yip i thought the same, but after putting in the firewall rules i turned off the firewall completely to check and same happend notting...

what bugs me is that STAS suite says "good connection" but nothing is happening on the XG side, i wish there was some kind of information

saying listen here this isnt working then i can fix it... lol. I do however see this in the log veiwer, if this helps anyone

BUMP, plz guys need help here

Send me a PM and I will help you.

Luk

Thank you so much Lferrara, for the help:

steps taken to resolve my issue with the assistance of LFerrara

1. make sure all users and all groups are deleted except the default ones that came with the setup

2. create a separate GROUP inside your DC "called mine [internet proxy users]" and add all the DC users that are going to access the internet

3. go to you GPO editor, and make sure inside you GPO!! not local policy, that auditing logon is on for both OFF and ON logins,

apply,

go to PC gpupdate /force in cmd with admin auth, for all domain PC's and restarting each PC after its done

4. make sure the that you have the ROOT AUTH cert installed on each domain PC aswell, can be found under SYSTEM > Certificates > Certificate Authorities > default "click" > download

5. If you using a firewall make sure that you have these ports unblocked: 6060, 6677, 5566 TCP/UDP

6. In authentication on servers delete anything thats there and start over, once added, click the import button just under the manage column

find the newly created group and import using all the normal steps "it can take time to show the users"

7. Go to System > Authentication > Authentication Services or Objects > Assets > Authentication Services

make sure the newly added authentication server is listed first under firewall authentication rule... "drag it to TOP"

References :

https://community.sophos.com/kb/en-us/123154

https://community.sophos.com/kb/en-us/123156

Answered

Hi,

I have the same problem with my virtual lab... i install xg v16 on my vm worksation. for test and migrate my appliance in production to this version. I done all you tell to the other person but i still have the problem. The user hav problem to connect to my utm authentication FAILED...

I have the same problem and i do all you tell in your post it doenst work...

Hi open a new thread, as this one has already been answered, i think i see the problem

Done i start a new threat

STAS problem with user authentication on XG v16

Done i start a new threat

STAS problem with user authentication on XG v16