Sophos SSO web authentication

[neonetman]

I'm busy trying to set up our new Sophos XG firewall (as I've done in previous roles), but am having issues gettigng NTLM authentication to work in the browser.

 

I've added an AD server, and tested the connection before importing groups. This server is happily authenticating for users using WAF and user portal access, however when I try to opena browser it records the following error in the Sophos authentication log:-

 

Cannot establish NTLM authentication channel with {our netbios name} - 17945

 

Can anyone advise on this?

 

Cheers

 

Iain

[BKGarry]

If these are domain joined machines, you want to get STAS installed on all your DCs, with the other DCs setup as collectors in them. This will look for the login events and log them in and out of the firewall.

 

If they are not domain joined, do you have user based RADIUS? as we have our NPS server passing those details through too.

 

Basically you want STAS over NTLM