Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 4 subscribers
  • Views 1530 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

STAS Device Access Question

gr33ny

 Hi

 

I will be implementing STAS for Web Protection but am unsure about device access after reading some documentation.  I am assuming the operation mode is "Standard" with "Agent" authentication.

 

We have some Meraki WiFi access points, they are connected to the same network that Web Protection will be filtering (our LAN) but we have set up two of the SSIDs to use Meraki DHCP and for them to be blocked from accessing the LAN (all done within the Meraki).  These are used for clients and employee's laptops, smart phones etc.  What will happen when a Meraki requests a web page?

 

We also occasionally have contractors etc. in who use laptops not on our domain (e.g. local user accounts) but plug into our LAN via Ethernet.  Will it be possible for them to access websites after we have enabled STAS?  I notice in one document it says these are "unauthenticated users", but it does not elaborate on what happens to these users.

 

Many thanks



This thread was automatically locked due to age.
Parents
  • 0

    Hi gr33ny,

    you don't need STAS for Webprotection. You can use AD SSO without any agent installed.

    You should create for your WLAN Clients seperate Webfilter Profiles. The you can use Browser based authentication for local or AD Accounts. Or you choose no Authentication.

    You should create for every Requirement a seperate Webfilter Profil with seperate policy and seperate Filter Action.

    Start with the following KB articel:

    https://community.sophos.com/kb/hu-hu/115865

    Regards

    mod

     

Reply
  • 0

    Hi gr33ny,

    you don't need STAS for Webprotection. You can use AD SSO without any agent installed.

    You should create for your WLAN Clients seperate Webfilter Profiles. The you can use Browser based authentication for local or AD Accounts. Or you choose no Authentication.

    You should create for every Requirement a seperate Webfilter Profil with seperate policy and seperate Filter Action.

    Start with the following KB articel:

    https://community.sophos.com/kb/hu-hu/115865

    Regards

    mod

     

Children
No Data