Hi All. Have the stats suite on DC Tested all ports on DC/Workstation - working Active users is correct Adding the AD group on Sophos XG works No users are showing up on the Sophos device I've read the logs on stats and can't see anything obvious...

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Having trouble getting stats/ad working

HaydenKirk over 7 years ago

Hi All.

Have the stats suite on DC
Tested all ports on DC/Workstation - working
Active users is correct
Adding the AD group on Sophos XG works
No users are showing up on the Sophos device

I've read the logs on stats and can't see anything obvious...

This thread was automatically locked due to age.

Parents

0 lferrara over 7 years ago

Hayden,

Did you enable the audit logon events on DC using default domain policy or by creating a new one?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 HaydenKirk over 7 years ago in reply to lferrara

Local policy - Can confirm it's working. Users are showing as active users under STAS.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to HaydenKirk

Did you create the collection group on XG using the CLI or GUI?

Did you create a firewall rule where match know users is checked?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 HaydenKirk over 7 years ago in reply to lferrara

Created the collection group via GUI

If I change to match known users and activate portal if unknown, I always get the portal.

Basically, the users are not being added to the XG for some reason.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to HaydenKirk

Hayden,

did you create an exception on Windows Firewall for port 6677 from XG IP?

Show us all screenshots.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 HaydenKirk over 7 years ago in reply to lferrara

Sure.

Firewall

STAS

Collector Tests

STAS Setup

AD Setup

Users

Clientless Users
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to HaydenKirk

Hyden,

did you import the groups using the wizard option?

https://community.sophos.com/kb/en-us/123158
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to lferrara

Also,

did you change the authentication server priority?

https://community.sophos.com/kb/en-us/123155

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 HaydenKirk over 7 years ago in reply to lferrara

Yes - no users came through. Deleted and retried. Was under the impression STA would add them if they matched the group?

Also, ad is set to the top.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to HaydenKirk

Hayden,

you have to use the wizard to tell to XG which groups to have a look at.
Cancel
Vote Up 0 Vote Down

Cancel
0 HaydenKirk over 7 years ago in reply to lferrara

I've run through the wizard a number of times, imported the group. You can see it's greyed out here as it's imported.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 7 years ago in reply to HaydenKirk

Hayden,

It seems you have done all steps. I would suggest to try with Windows Firewall disabled (allow all) and see if it works.

Use tcpdump port 6677 and check if communication between XG and STAS is working.

Lastely go to Administration > Device access and make sure SSO is enabled on LAN zone.

Otherwise open a ticket with support.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 lferrara over 7 years ago in reply to HaydenKirk

Hayden,

It seems you have done all steps. I would suggest to try with Windows Firewall disabled (allow all) and see if it works.

Use tcpdump port 6677 and check if communication between XG and STAS is working.

Lastely go to Administration > Device access and make sure SSO is enabled on LAN zone.

Otherwise open a ticket with support.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 HaydenKirk over 7 years ago in reply to lferrara

Thanks. Really appreciate all your help.
Cancel
Vote Up 0 Vote Down

Cancel