We want to be able to easily identify students by their ID when web surfing. Can we use AD to use their login ids?

Question

Hi 
 From what i can see the AD integration only allows people to login to the SOHPOS server. We need to have an accurate way of viewing a students travels around the web. We are currently using RADIUS logs to reconcile IP addresses against user ids as everyone is currently Unidentified. They already use AD to authenticate when connecting to the Wifi within the College. 
 Can we configure our SOPHOS firewall to use the user ID to record their web activity? 
 To make it more interesting the devices are student owned so we don't want to install any certs (if indeed there are certs for the iPads) 
 thanks 
 Stuart

lferrara · Accepted Answer

Stuart, 
 what Ashen1 suggested is correct. If you users already signed in to AD using SSO, Sophos will associate username and IP and allow/block the traffic based on users without requiring users to authenticate again. 
 Reports of course will be user-based. 
 Regards