Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 2 answers
  • Subscribers 7 subscribers
  • Views 9248 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is Sophos STAS available for SG UTM 9 or is this only applicable on the XG UTM

RobertWalthall

Hi I've downloaded the Sophos STAS suite and I'm trying to follow the config guide, however, in my SG UTM I don't have the same options listed under client authentication as per the guide.

Am I missing something here?

Thanks.



This thread was automatically locked due to age.
Parents
  • 0

    Greetings, I asked the following question today to Sophos tech support and found I was more confused after than before asking. I currently run SG330/UTM9 version 9.355-1, Transparent Mode web filter with Active Directory SSO enabled and Block access on auth.failure. Works perfectly fine.

    I read STAS was available and thought perhaps there were additional features/functionality available, something beyond what I currently have at my disposal under the current config. I didn't gain much insight from reading the install guide, so I asked tech support what would I gain, and why would I install STAS given my current config and everything works great?

    Tech support could only tell me, "well I asked the guy sitting next to me and we both agree, this should not be working as you've described it." Silence ensued, then I said thank you? All he finally said was have a nice day and hung up.

    So, asking here, what would I gain by utilizing STAS given my current config? I don't have a lab available to download test etc. Thank you for any further information on the topic.

    todd

Reply
  • 0

    Greetings, I asked the following question today to Sophos tech support and found I was more confused after than before asking. I currently run SG330/UTM9 version 9.355-1, Transparent Mode web filter with Active Directory SSO enabled and Block access on auth.failure. Works perfectly fine.

    I read STAS was available and thought perhaps there were additional features/functionality available, something beyond what I currently have at my disposal under the current config. I didn't gain much insight from reading the install guide, so I asked tech support what would I gain, and why would I install STAS given my current config and everything works great?

    Tech support could only tell me, "well I asked the guy sitting next to me and we both agree, this should not be working as you've described it." Silence ensued, then I said thank you? All he finally said was have a nice day and hung up.

    So, asking here, what would I gain by utilizing STAS given my current config? I don't have a lab available to download test etc. Thank you for any further information on the topic.

    todd

Children
  • 0 in reply to ToddCooper

    ToddCooper said:

    So, asking here, what would I gain by utilizing STAS given my current config? I don't have a lab available to download test etc. Thank you for any further information on the topic.

    Without STAS the only place where you can transparently authenticate users (SSO) with AD is Web Filtering module.

    With STAS you can use user objects also in other modules, like in Firewall, QoS, Application control rules etc, which was not possible unless with installing Sophos Authenticator Agent (SAA) on the clients. This feature was ported from Cyberoam UTM, and was known as Layer 8 (user based) filtering.

  • 0 in reply to vilic

    vilic said:

    ToddCooper

    So, asking here, what would I gain by utilizing STAS given my current config? I don't have a lab available to download test etc. Thank you for any further information on the topic.

    Without STAS the only place where you can transparently authenticate users (SSO) with AD is Web Filtering module.

    With STAS you can use user objects also in other modules, like in Firewall, QoS, Application control rules etc, which was not possible unless with installing Sophos Authenticator Agent (SAA) on the clients. This feature was ported from Cyberoam UTM, and was known as Layer 8 (user based) filtering.

    Thank you vilic