Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 4 subscribers
  • Views 9287 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Protection SSO - Terminal Server

NicBarry

Hi,

We're currently setting up SSO at one of our customer sites, and have identified that when using the Terminal Server, the first authenticated user is the only user reported as generating web traffic.

That is, when multiple users are logged into the one computer, the SSO basically does not work.
We are implementing SSO to attempt to identify who is generating what traffic, and I believe this will not be reliable.

Is there any way to fix this? 
Perhaps every web request could be forced to authenticate, and there be no IP based caching of credentials?

Thanks,
Nicholas Barry 



This thread was automatically locked due to age.
Parents
  • 0

    Hi, Nic, and welcome to the UTM Community!

    I don't know if 9.4 STAS can do this, but you might check with your Sophos Account Manager or Partner SE - let us know!

    At present, I think your only solution is to use the SAA in each TS session.

    Cheers - Bob

  • 0 in reply to BAlfson

    Hi Bob,

    Thanks for the warm welcome!

    I'll have to find out whether STAS will be the solution. The TS is going live in a month or so, I wonder how far off 9.4 is.

    I have lodged a ticket with support, who mentioned something about using standard mode, instead of transparent.

    Do you think this would work?

    Cheers.

    Nic

  • 0 in reply to NicBarry

    Good question.  Have you tried it?  I can see why it might work, but I also expect the 5-minute cache issue affects it.  Please let us know the result of your test.

    Cheers - Bob

  • 0 in reply to NicBarry

    Hi Nic

    We are using many TS with Webfiltering in Standard Mode.

    This works perfect without the issue you described when in transparent mode.

    PS: You can use the WPAD function of the UTM for bypassing the Web-Filter if you have some Website which shouldn't be filtered.

    Regards,

    Michael

Reply
  • 0 in reply to NicBarry

    Hi Nic

    We are using many TS with Webfiltering in Standard Mode.

    This works perfect without the issue you described when in transparent mode.

    PS: You can use the WPAD function of the UTM for bypassing the Web-Filter if you have some Website which shouldn't be filtered.

    Regards,

    Michael

Children