Authentication and AD group issues in XG-210 Firewall

Vineeth,

can you check the access_server.log and the csc.log inside the /var/tslog from XG command line (option 5 > 3)?

The other option is to open a ticket with Support.

Thanks

Hi Vineeth,

I guess that happens due to default lookup in the backend for group membership. Please refer the below thread if you can find the solution.

https://community.sophos.com/products/xg-firewall/f/authentication/80216/client-authentication-agent-causes-user-s-group-to-reset-to-open-group-on-login#pi394filter=all&pi394scroll=false

Thanks

How can we export this log to the local machine.

We have created  a new ticket with Sophos support, but we are not getting any timely response from the support team.

As we tested the sync from AD is working but Sophos update these sync in a different way, don't know why this is happening we have tried changing the group reorder and by changing the default group found no use.

Not sure if this helps, but we got this working by creating new groups for the filter actions we wanted.  The key was to make sure members were only in one of these groups at a time (hence why we created specific filter groups).  So for example, we had three classifications:  Executives, Management, Everyone Else.

Executive and Management got placed into respective new AD groups while everyone else we let fall into the DefaultGroup.

These groups were then synced to the firewall and order adjusted.  That has been working without issue for awhile.  stas/satc, well that's a whole other story!