This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Logoff Dectection STAS

Hi all,

I have a testcase, I integrated AD with Sophos XG and use STAS. I configured user Test can access to internet, I log on user Test to the machine. Then I log off user Test and log on local account to the this machine. Just like the rule this machine can't access to internet, but this machine still can access to internet with user Test.

I'm tried configuring "Logoff Detection" with guide: https://community.sophos.com/kb/en-us/123020 but failed.

And now, I want to check "Logoff Dection" with EventLog (not WMI), How I can?

This thread was automatically locked due to age.

Parents

0 daiqingxu over 7 years ago

EventLog just don't have a definitly clue about that. If a client force power off and login into local user, there just no logoff event anywhere. So you need to use WMI to query which user is logged in to determine if user has logged out or not.

We go with sso client partly because of that and wmi remote access is hard to do right. The client approach can do heartbeat communication with firewall and activly report user is still logged in.
Cancel
Vote Up 0 Vote Down

Cancel
0 Huy Vu over 7 years ago in reply to daiqingxu

So, option "Log off Dectection" is hard to do right?
Cancel
Vote Up 0 Vote Down

Cancel
0 daiqingxu over 7 years ago in reply to Huy Vu

Hard to do right if there is no proper server-client communicate solution implemented.

Windows do have something on that, IEEE 802.1X, i think you can integrate that with radius sso, which should be the best solution (most complicated one also).

Other wise if reliable Log off Dectection is needed, client is hard to avoid.
Cancel
Vote Up 0 Vote Down

Cancel
0 daiqingxu over 7 years ago in reply to Huy Vu

You can use sso client which you can repackage it as a msi installable distribute through gpo and a run program policy on user login.
Cancel
Vote Up 0 Vote Down

Cancel
0 Huy Vu over 7 years ago in reply to daiqingxu

I know this solution, but I think we will captive portal is possible for us. Thanks you!
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Huy Vu over 7 years ago in reply to daiqingxu

I know this solution, but I think we will captive portal is possible for us. Thanks you!
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data