Can't login with windows user to user portal

In STAS Agent, Goto -> Advanced -> Show Live Users List

Check if you can see any live users here or not. If not,

1. Verify that you have followed Step # 3 of https://community.sophos.com/kb/en-us/123156

Restart STAS by clicking on Apply and then Ok. Check if you see Live Users in Live Users List again. If not :

2. open services.msc -> Right Click -> Properties -> Log On -> This Account -> Browse -> Type admin and 'Check Names' select administrator user, re-enter password.

Restart STAS by clicking on Apply and then Ok. Check if you see Live Users in Live Users List again.

Hi Nino,

STAS and portal login are separate components of the XG. STAS is used for authenticating users for firewall and application rules.

While portal access is governed by Authentication > Services > Authentication Methods

Make sure that your AD server is selected as a method for authentication, the same is used for VPN etc.

Here is slink to the AD integration page: https://community.sophos.com/kb/en-us/123155

Hope this helps,

Regards,

Julius

Hi Julius

Thanks for your answer.

I made this and when I test the communication it says it works. I also was able to import the user group. But when I check the list of members there are none shown.

Hi Anish

Thanks for your answer.

I have 3 logged in Live User.  Also Step #3 is done:

Nino,

you need to edit the default domain policy and not local security policy (which affects only DC computers).

https://mizitechinfo.files.wordpress.com/2013/08/2.png

Regards

Hi Iferrara

Thanks for you answer. I set this aswell, but so far with no change:

But I'm a bit confused why this is needed. I see a user from a workstation in the live user list already and also the documentation states nothing from that?

I noticed that on the General Tab the part with the Sophos Applicance served is empty. Might that be the reason here? Does anyone have an idea what the cause could be for that?

Nino,

check all the required steps:

https://community.sophos.com/kb/en-us/123156

https://community.sophos.com/kb/en-us/123155

https://community.sophos.com/kb/en-us/123158

STA collector TAB : XG internal IP

From console:

system auth cta show
  CTA Status          : enable
  CTA Collector          : enable
  Unauth-Traffic Drop Time: 120 sec
  ============================================================
  Collector IP       : Collector Port       : Collector Group
  ------------------------------------------------------------
    DCIP             : 6677                 :         1
  =========================================
  VPN Source Network : VPN Source Netmask
  -----------------------------------------
       -         :       -
Regards

"Playing with gpo is always a big mistake with non Microsoft System Admin."

As far as I can see I have done all the steps.

Also the output on my XG115 looks identically to yours:

Nino,

Make sure firewall ports are open on active directory server from XG. Check port 6677 with tcpdump from XG.

Create a user firewall rule where ad users are added and test if into XG live users the counter increments.

Regards