Having trouble getting stats/ad working

Hayden,

Did you enable the audit logon events on DC using default domain policy or by creating a new one?

Thanks

Local policy - Can confirm it's working. Users are showing as active users under STAS.

Created the collection group via GUI

If I change to match known users and activate portal if unknown, I always get the portal.

Basically, the users are not being added to the XG for some reason.

Hayden,

did you create an exception on Windows Firewall for port 6677 from XG IP?

Show us all screenshots.

Thanks

Sure.

Firewall

STAS

Collector Tests

STAS Setup

AD Setup

Users

Clientless Users

Hyden,

did you import the groups using the wizard option?

https://community.sophos.com/kb/en-us/123158

Also,

did you change the authentication server priority?

https://community.sophos.com/kb/en-us/123155

Thanks

Yes - no users came through. Deleted and retried. Was under the impression STA would add them if they matched the group?

Also, ad is set to the top.

Hayden,

you have to use the wizard to tell to XG which groups to have a look at.

I've run through the wizard a number of times, imported the group. You can see it's greyed out here as it's imported.

Hayden, 

It seems you have done all steps. I would suggest to try with Windows Firewall disabled (allow all) and see if it works.

Use tcpdump port 6677 and check if communication between XG and STAS is working.

Lastely go to Administration > Device access and make sure SSO is enabled on LAN zone.

Otherwise open a ticket with support.

Thanks. Really appreciate all your help.

Thanks. Really appreciate all your help.