Sophos XG internet issues

[Uber22]

Hey all

 

I have recently install our nice shinny Sophos XG firewall and implemented stas sso. I have been having some issues for a few weeks but today I have had it down the banks from lots of teachers.

 

It's seems that the xg is logging off users if there inactive for one minute or two I have turned off log off detection and group policy logon as a service has the correct user in.

 

I have been on the phone with Sophos more than 12 times and each engineer does something different.

 

Any one else having this issue

 

PS Sophos offered an engineer to come to site for 1 day @ £1300 🤣

[localzuk]

We just had this set up here. We paid for that 1 day of engineer time and it really is worth the money IMO. The guy we had knew everything about the system back and front. His explanation of STAS is that by default it uses WMI to check for people being logged in. If WMI isn't working properly, or the STAS agent can't connect to check, it assumes the person has logged off.

 

So, the first thing I would check is the status of WMI across your Windows machines. Make sure the account you specified during the set up of STAS on your DC(s) is able to connect to the machines properly.

[maark]

We had some issues due to PTR records not being updated - so sophos STA wouldn't connect via WMI

After changing lease times and forced up date policy it is working pretty well.

Problem we have now is in Chrome it is not picking up youtube strict filtering for students when they put in an override code yet it does in IE and Edge.

Anyone else seen this or have a fix?

[Uber22]

hi all

 

i found the issue in the end, for some reason a handfull of pcs had our old sophos AV on them witch controlled the local firewall once i removed this and install sophos endpoint all the issues have gone away.

 

 

Thanks