This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AD User Based Access - UTM 9.4

We are using Sophos UTM SG 450 firmware 9.4

I was expecting that the new 9.4 firmware will include user based capability on firewall rules and application control in conjunction with STAS Agent.

I have installed STAS in one of the DCs, STAS agent reports users to Sophos Appliance, so the configuration is fine, but Firewall Rules and Application Control still does not work based on Active directory Groups or Users.

Any idea?

This thread was automatically locked due to age.

Parents

0 vilic over 9 years ago

You have to use Username (User Network) and Group (User Group Network) objects in your firewall rules, not standard user and group objects.
Cancel
Vote Up 0 Vote Down

Cancel
0 BurimTahiraj over 9 years ago in reply to vilic

That's what I am using on Firewall Rule and App Control.

I did test blocking Skype for some Users (User network) but it does not work, App Control Live Log shows no traffic, I can only see traffic on Web Protection Live Log which states that skype is allowed for user ......

I am using Web Protection Transparent Mode with SSO. Users have UTM Lan IP configured as their proxy address.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BurimTahiraj over 9 years ago in reply to vilic

That's what I am using on Firewall Rule and App Control.

I did test blocking Skype for some Users (User network) but it does not work, App Control Live Log shows no traffic, I can only see traffic on Web Protection Live Log which states that skype is allowed for user ......

I am using Web Protection Transparent Mode with SSO. Users have UTM Lan IP configured as their proxy address.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 vilic over 9 years ago in reply to BurimTahiraj

I've tested STAS only with firewall rules where it works without any problem using User Network objects.

For Web Filtering try with changing Default authentication from AD SSO to Agent . It is obviously undocumented STAS feature described in this forum post:
https://community.sophos.com/products/unified-threat-management/unified-threat-management-beta/utm_94_beta/f/140/p/75192/289667#289667

Please post results back.
Cancel
Vote Up 0 Vote Down

Cancel
0 BurimTahiraj over 9 years ago in reply to vilic

After some testing my believe is that User Based Access on Firewall Rules and App Control will only work if you completely disable Web Filtering, that's the only time it works with me. Disabling Web Filter is not an option for us here since we definitely need it Enabled.
Cancel
Vote Up 0 Vote Down

Cancel