Sophos XG Synchronised ID

[lmrogers]

Good Afternoon,

 

Quick question for anyone running a Sophos XG and Sophos Endpoint Protection, or anyone just running a Sophos XG really.

 

We have Sophos XG integrated with our AD (which is on a .local domain name) and this is generally working fine, unless people join the wireless by putting in their email address (which is .org domain name, as a UPN suffix in AD).

 

However, when I install Sophos Endpoint protection on a computer, it authenticates the user logged in through Heartbeat and the client is only sending the username (samaccountname attribute). It does not seemingly send/auth with the netbios name prior to the username.

 

https://support.sophos.com/support/s/article/KB-000038494?language=en_US

 

In that support article it states that the UPN must be the same as the samaccountname. I might be being a bit dumb on a Friday afternoon but has anyone got this setup and working or able to point me in the right direction as to why its not authenticating with either the .org domain or the client isn't sending the fqdn of the user logged in?

[Jaan]

Make sure this is populated with your computer domain for all users that need authentication.

 

[lmrogers]

Unfortunately can't do that because I need the UPN set with our public domain name for the 365 sync

[Jaan]

Unfortunately can't do that because I need the UPN set with our public domain name for the 365 sync

 

Ah ok, we use Google here so it sync differently. When i setup the heartbeat, i had the same issue as you with authentication. Some of the users that had been manually had the local domain missing as in the above screenshot. to get it to work i had to use the internal domain (in our scenario).

 

This seems to maybe be a limitation.

[lmrogers]

Yeah from what I can see on Sophos forums it should start supporting multiple UPNs in firmware version 18.5