Authenticated Relay

Question

Hello, 
 I would like to authorize authenticated relaying in XG. 
 I'm in MTA mode and I've created a user but when I tried with a SMTP client, it doesn't work. 
 It seems that the XG MTA don't ask/accept the AUTH command. 
 
 Regards, 
 Thibault

Aditya Patel · Answer

Hi tdutrieux , 
 SMTP auth would not work , you may need to configure LDAP, AD connections with your mail server.

LuCar Toni · Answer

Hi, 
 "Authenticated relay" on XG is not like on UTM. 
 Authenticated Relay on UTM is based on the SMTP transmission, while XG works via Policy authentication, like User based Firewall / live user. 
 Cheers

HuberChristian · Answer

In the meantime after 3 Weeks, I was able to get an valuable Answer from the support. I was told the following:

1. Authenticated Relay as it's defined in SMTP Standard (tools.ietf.org/.../rfc4954) is currently NOT Supported on XG Firewall.
2. Authenticated Relay on XG means, the User has to authenticate via STAS or SATC BEFORE he sends the Mail.
3. Authenticated Relay as everybody in the world uses it (RFC4954) is going to be Implemented on SFOSv18.

This is really awkward. I do have very few understanding for having implemented this not according the existing Standards. I have even less understanding for sophos not having documented it on a Public available KB.