Sophos XG not automatically allowing users on internet, chrome, edge DNS issues.

[Theldron]

Hi all,

 

We have installed a new Sophos XG firewall a couple of weeks ago. All was going well until last Thursday, when not all, but alot of users where not able to go straight to the internet. We have STAS installed and running.

 

When they use chrome or edge they get a 'The wifi/network you are using may require you to visit its login page.' If I go to internet explorer the Sophos login box appears, the user signs in and we are away. I have noticed that if we replace the DNS name on the error page in Chrome or Edge with the box IP address the Sophos box appears. So we have 2 issues:

 

1. Users are not automatically able to get onto the internet without signing into the Sophos box.

2. The Sophos box does not show in Chrome or Edge unless the IP address is put in instead of the DNS name.

 

Any ideas?

 

Many thanks

[Theldron]

I can ping dns name from any device, but it will only work with Chrome or Edge unless i put in ipaddress:8090. Any help please.

[Jaan]

You also using Sophos AD sync?

 

https://support.sophos.com/support/s/article/KB-000035346?language=en_US#What-is-AD-Sync

 

EDIT: Also sometimes our STAS service stop on one of the DCs. Just check it hasn't stopped

Edited September 22, 2020 by Jaan

[Theldron]

You also using Sophos AD sync?

 

https://support.sophos.com/support/s/article/KB-000035346?language=en_US#What-is-AD-Sync

 

EDIT: Also sometimes our STAS service stop on one of the DCs. Just check it hasn't stopped

 

Hi, I did not set this up. But we are using Sophos AD Sync and STAS is running.

 

It's just really odd that it was working one minute then not the next. I am sure that I haven't changed anything.

[Theldron]

Found the cause, it was a firewall problem on the DCs with STAS on. All sorted now.