One account works on computer while another doesn't?

David,

are you using authentication on Sophos XG? I mean, your firewall rule are user-based or network-based?

Are you using SAA?

Thanks

I'm not sure what you mean. Different users have different rules (my account doesn't have the restrictions of the kids'), but all users have to log in to access the network.

David,

thanks for the reply. Are you using Captive portal? If yes, can you share the settings of captive portal?

Thanks

Luk,

I am not using captive portal.

Thanks for your help.

David,

please explain better your scenario (authentication type, screenshot of firewall rules, etc..) otherwise we are not able to help you.

Thanks

Luk,

Sorry for not explaining clearer. Users cannot access the network without logging in using the client authentication agent. I have two accounts with a restriction on data transfer per day and games/sexually explicit content. Both of them work on every device in the house besides a Windows 10 computer connected using Ethernet. On that machine, one account is able to log in and access the internet, but when the other logs in, the client authentication agent accepts the information but internet access is not granted.

I'm pretty sure it is something with the computer that I configured for one account but not the other, since both accounts work on everything else exactly the same. Is there anything (ip address, etc.) Specific to the computer that could prevent one account from accessing the internet after logging in?

David,

thanks for the information. So you are using SAA, Sophos Authentication Agent.

If both users use the same computer at the same time, traffic is generated from the same IP so Firewall should have a problem on that. Make sure on the firewall rule you have added both users.

Network devices do not understand users (inside the ISO-OSI, users is not present), so XG (and other devices) associate the user with IP address and then on that IP they route/allow/deny traffic.

Try this,

once the first user is logged in and is able to surf, log with the other user and open the captive portal (https://xglanip:8090) and proceed with authentication. Check if the user then is able to surf. If it is, the problem is with SAA which is not able to handle more than one user at time.

Regards

David,

also do not forget that per each user, you need to install the SAA or import the Certificate. Each user has its own certificate.

Thanks

Thank you for the information. I believe I forgot to import the certificate for the other user! Thank you for your help.

Thanks David.

Let us know.