Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • +3 person also asked this people also asked this
  • Locked Locked
  • Replies 15 replies
  • Answers 1 answer
  • Subscribers 11 subscribers
  • Views 34349 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Stas started, and connection test success, but no user showing in live users/advance

TingYu

stas start = ok

connection test to utm, and between agent and collector = ok

VMI test = ok

but when I go to advance/view live users, it shows blank

My server is window 2003 domain.

Please help. thanks in advance.



This thread was automatically locked due to age.
  • 0

    You need to enable windows logon events from secpol.msc or windows security policy on Domain Controller to collect logs and report to stas that users get connected/disconnected. You can find it under secpol.msc>local>audit and select both success and failure from both "logon" type events.

    Eren ERTAS

    SCA-CCNA-ATCT-HCNA-MCT-MCSE

  • 0 in reply to ErenERTAS

    Many thanks Eren.. 

    The Sophos Engineer had already enabled that on our DC during the initial install of the XG. 

  • 0 in reply to ErenERTAS
    Also, I even had to turn off our second domain controller, as the STAS agent on it was not informing the STAS collector (on the 
     
    primary DC) that it had authenticated users.
     
    I am beginning to wish I had stuck with Sonicwall..!
  • 0 in reply to Tam Ben-Jusu

    I can't say "that is the problem" but Server 2003 is not supported on STAS software. And it is the most problematic domain tree in ldap world. I need a deep check of the system. Maybe you can recheck your configuration from https://community.sophos.com/kb/en-us/123156 Sorry

    Eren ERTAS

    SCA-CCNA-ATCT-HCNA-MCT-MCSE

  • 0 in reply to ErenERTAS

    Many thanks Erin,

    I have followed that kb article.

    And, apologies, we are on a 2012 R2 domain.

    Users appearing in STAS 'Show Live Users' is very hit & miss!

    Users authenticating against the domain appear in both STAS logs 'View Log' & 'View Logging Events'  but do not appear in 'Show Live Users'.

    Therefore they do not appear in 'Live Users' on the XG.

    Users then get the Captive Portal to authenticate against when they shouldn't.

    To add to this, I've also found the Captive Portal drops out randomly!! Even though 'Preserve captive portal after login' is set to 'no' and 'User inactivity timeout' is set to 'unlimited'.

     


      

     

     

     

     

Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?

Unfiltered HTML