Sophos firewall + chromebooks

[Paid_Peanuts]

Does anyone have Sophos UTM or XG firewalls and use Chromebooks?

 

We have XG firewalls but am struggling with authentication on chromebooks whereby Sophos can identify the traffic from a chromebook and pick out the logged on user.

The way Sophos works is by looking at logon events on your DC’s. Great as a transparent proxy for domain joined machines. Not so good as it transpires for chromebooks authenticating against Google.

 

If anyone has any experience of Sophos firewalls and Chromebooks I would be very interested to hear how you manage these.

[Wave9_Lee]

Hi there,

 

There are plans to improve chromebook authentication in a future release of XG, but in the meantime using a splash page to login will do the job.

 

regards

 

Lee

[Jaan]

We have a sophos utm and create a dedicated WIFI SSID with dhcp/dns and force a web filter rule to the ssid. In this case Students. Authentication is set to "transparent"

 

cheers

[p3t3r]

We have a Sophos UTM and apply policies based on VLAN. Chromebooks are on their own vlan so we can apply a specific policy based on this. If looking up internet history, we just need to look up users against another system. Not as integrated as I'd like but it works and has never caused any issues.

[Paid_Peanuts]

We have a Sophos UTM and apply policies based on VLAN. Chromebooks are on their own vlan so we can apply a specific policy based on this. If looking up internet history, we just need to look up users against another system. Not as integrated as I'd like but it works and has never caused any issues.

 

Yes we have the chomebooks on their own VLAN so are able to apply the "student filter" to all traffic from that VLAN. You refer to looking up their history "against another system" - do you mind me asking what this is? How do you correlate what a student has been on last Thursday period 3 for example if they were on a chomebook?