Sophos XG Authentication Service Issue

[ap_]

We had been experiencing an intermittent but annoying XG authentication problem since SFOS 17.5.4 MR-4-1 which requires us to restart the Authentication Service to allow users to authenticate. Just upgraded to SFOS 17.5.5 MR-5 and the problem is now happening very frequently.

 

I am on hold waiting to get through to Sophos support but if any XG users out there have had this issue and know of a fix, please could you kindly post.

 

Many thanks

[synaesthesia]

We had this but updating resolved it quite a few releases ago. Wave9 sorted it for us, not sure if there's anything else involved!

[Paid_Peanuts]

17.5.5 MR-5 here without issue. If there is anything you would like us to check let me know.

[Simcfc73]

My new rig is playing silly with authentication.. random users getting prompts for the captive portal and the logs showing my admin account on every computer. Just tried a non domain laptop and no captive portal prompt but logged on as a admin.

[ap_]

After investigation, Sophos support applied this KB https://community.sophos.com/kb/en-us/125468 and advised us to see how it progresses. Thanks to all for help offered. I will update this ticket with any progress made.

[Wave9_Lee]

My new rig is playing silly with authentication.. random users getting prompts for the captive portal and the logs showing my admin account on every computer. Just tried a non domain laptop and no captive portal prompt but logged on as a admin.

 

Hi Simcfc73, you have a call open with us ref this and I can see that it seems related to your ESET AV disconnecting users, think our technician is waiting for an update after it was excluded from STAS? If you can respond, we can progress accordingly.

 

If you need anything else, drop us a line at [email protected]

 

cheers

[Simcfc73]

Yes it 'seems' to be related to ESET although its only just started happening even though its been in for 2 weeks.

 

I've sorted the STAS out and just leaving it a while till I see if its fixed.

 

It seems weird as I cant see where ESET is getting the credentials from, unless its when it was installed.