Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 14 replies
  • Subscribers 26 subscribers
  • Views 19626 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

One account works on computer while another doesn't?

David Pu

I have a sophos xg firewall and two children who use the same computer. One of their accounts allows the computer to access the internet without any issues, but the other account causes the network panel to read "no internet." In both instances, the icon in the right side of the dock (windows 10) is orange, so I know that both accounts are logging in, but only one is able to access the internet. The problem account also works on my Android phone. There is no different between the permissions granted to each account, so what could be wrong?



This thread was automatically locked due to age.
Parents
  • 0

    David,

    are you using authentication on Sophos XG? I mean, your firewall rule are user-based or network-based?

    Are you using SAA?

    Thanks

  • 0 in reply to lferrara

    I'm not sure what you mean. Different users have different rules (my account doesn't have the restrictions of the kids'), but all users have to log in to access the network.

  • 0 in reply to David Pu

    David,

    thanks for the reply. Are you using Captive portal? If yes, can you share the settings of captive portal?

    Thanks

  • 0 in reply to lferrara

    Luk,

    I am not using captive portal.

    Thanks for your help.

  • 0 in reply to David Pu

    David,

    please explain better your scenario (authentication type, screenshot of firewall rules, etc..) otherwise we are not able to help you.

    Thanks

  • 0 in reply to lferrara

    Luk,

    Sorry for not explaining clearer. Users cannot access the network without logging in using the client authentication agent. I have two accounts with a restriction on data transfer per day and games/sexually explicit content. Both of them work on every device in the house besides a Windows 10 computer connected using Ethernet. On that machine, one account is able to log in and access the internet, but when the other logs in, the client authentication agent accepts the information but internet access is not granted.

    I'm pretty sure it is something with the computer that I configured for one account but not the other, since both accounts work on everything else exactly the same. Is there anything (ip address, etc.) Specific to the computer that could prevent one account from accessing the internet after logging in?

  • 0 in reply to David Pu

    David,

    thanks for the information. So you are using SAA, Sophos Authentication Agent.

    If both users use the same computer at the same time, traffic is generated from the same IP so Firewall should have a problem on that. Make sure on the firewall rule you have added both users.

    Network devices do not understand users (inside the ISO-OSI, users is not present), so XG (and other devices) associate the user with IP address and then on that IP they route/allow/deny traffic.

    Try this,

    once the first user is logged in and is able to surf, log with the other user and open the captive portal (https://xglanip:8090) and proceed with authentication. Check if the user then is able to surf. If it is, the problem is with SAA which is not able to handle more than one user at time.

    Regards

  • 0 in reply to lferrara

    David,

    also do not forget that per each user, you need to install the SAA or import the Certificate. Each user has its own certificate.

    Thanks

  • 0 in reply to lferrara

    Thank you for the information. I believe I forgot to import the certificate for the other user! Thank you for your help.

Reply Children