This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AD SSO & Internet access for non-AD members

Hello,

is there a chance to use the Sophos UTM 9.2 webfilter in a way that by default all users have to be authenticated by AD SSO (transparent mode) and some specific clients - that are no member of Active Directory - can authenticate by using a captive portal?

I cannot seperate the network in some IP-ranges to identify the clients by a special IP-range, so I cannot create different webfilter profiles for these groups.

The webfilter works in transparent mode, the default authentication mode of the profile is "AD SSO". Sophos UTM version is 9.205.

I hope someone has a good idea.

Best regards,
nkoch

This thread was automatically locked due to age.

0 ManuelKarl over 11 years ago

Hello,

can you define a speparate subnet for the specific non-ad clients?
Otherwise you have to define a proxy-profile for a network-group (in which are the definitions of non-ad hosts), the "main"- or global-profile (fallback) is then configured via ad-sso.
Cancel
Vote Up 0 Vote Down

Cancel
0 vilic over 11 years ago

Can you define static IP addresses for those clients ?
If you can than Umpf's advice is the solution.
Cancel
Vote Up 0 Vote Down

Cancel
0 NilsKoch over 11 years ago

Hello,

no I can't define static IP addresses for those clients.
Cancel
Vote Up 0 Vote Down

Cancel
0 vilic over 11 years ago

DHCP reservations ?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 11 years ago

You could add a higher priority profile in standard mode that comes ahead of the transparent mode profile and make the default filter action in the transparent mode very restrictive. Now, for the users that aren't members of the AD, tell them to configure their browsers to use the proxy if they want better access than the default in the transparent profile offers them.

Cheers - Bob

Sorry for any short responses. Posted from my iPhone.
Cancel
Vote Up 0 Vote Down

Cancel