Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 1925 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Filter profile not working with Active Directory groups with cyrillic characters

blowfish
Hello! we use web protection with AD with cirillic characters and spaces in CN
We also create AD SSO, and create group with AD backend (with full  LDAP path, and only with last CN (recomended in help Configuring HTTP/HTTPS proxy access with AD SSO with a Sophos UTM)), but proxy profiling not working for this groups.
Authentication Servers->Servers->Testing username give me "Passed",  and user present in group, but in proxy, this group not handled by proxy. Maybe someone can help?


This thread was automatically locked due to age.
  • 0
    Please show a line from the Web Filtering log file related to this username.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    Hi blowfish,

    I recall that we had updates regarding UTF-8 support, but I don't recall if that was part of 9.1 or 9.2 (which will be available for everyone soon).  I know that 9.2 did have many AD SSO updates.

    If you are running 9.1, please make sure you are using 9.109.

    If you are experiencing this problem in 9.109 and can wait, I recommend waiting until 9.200 is released and trying there.
  • 0
    2014:02:25-08:57:24 gw httpproxy[5442]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.202.145" dstip="173.194.32.159" user="******X" statuscode="200" cached="0" profile="REF_HttPro (Office_LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="16217" request="0xd02f13b8" url="www.google.ru/.../png"

    As you can see, filteraction=Default not Allow_All, and yes i use v9.109
Cookie Information Banner