New Sophos XG Firewall Nightmare

[Wirral_Wonderer]

We have purchased a Sophos XG Firewall, after being told that we can set it up ourselves (I should have know better!!!), mostly it works, however....

 

1- when we connect andriod devices we get the captive portal popup but won't connect due to certificate error. If we browse to the portal and authenticate it seems to work Sophos solution is to install their client on the device or get a globally signed certificate for the internal IP address (but we are accessing it from a url on an internal private address)

2- when we connect apple devices we don't get anything. If we browse to the portal and authenticate it seems to work. Sophos solution is to install their client on the device or get a globally signed certificate for the internal IP address (but we are accessing it from a url on an internal private address)

3- When we connect Windows devices we get a window asking for authentication but not the pretty portal one that I was expecting

4- We have a few staff who are in the right groups but are knocked off the internet when on domain PCs and reauthenticate every 10 mins - issue with STAS?!?

 

Is anyone available to help, as I am about to have a meltdown. If we need to pay then we will do as I am desperate!!!

 

Thanks

[Wave9_Lee]

We have purchased a Sophos XG Firewall, after being told that we can set it up ourselves (I should have know better!!!), mostly it works, however....

 

1- when we connect andriod devices we get the captive portal popup but won't connect due to certificate error. If we browse to the portal and authenticate it seems to work Sophos solution is to install their client on the device or get a globally signed certificate for the internal IP address (but we are accessing it from a url on an internal private address)

2- when we connect apple devices we don't get anything. If we browse to the portal and authenticate it seems to work. Sophos solution is to install their client on the device or get a globally signed certificate for the internal IP address (but we are accessing it from a url on an internal private address)

3- When we connect Windows devices we get a window asking for authentication but not the pretty portal one that I was expecting

4- We have a few staff who are in the right groups but are knocked off the internet when on domain PCs and reauthenticate every 10 mins - issue with STAS?!?

 

Is anyone available to help, as I am about to have a meltdown. If we need to pay then we will do as I am desperate!!!

 

Thanks

 

Hi, we can take a look if you want to send me your contact details? We’d have to charge something but sure we can work something out.

 

Cheers

[Jobos]

Hi, we can take a look if you want to send me your contact details? We’d have to charge something but sure we can work something out.

 

Cheers

 

Good offer there and I would say what @Wave9_Lee doesn’t know about XG isn’t worth knowing.

[Wirral_Wonderer]

Thanks for the recommendation @Jobos, I know they are very highly thought of.

[Steve21]

We've had our line replaced over summer and now have a Sophos XG in place, and get no end of problems every day with it. Always something new broken that worked the day before.

 

Management are already considering ditching it and putting our Smoothwall back in place just to get a stable connection again

 

If you find any words of wisdom to any of your issues Wirral would be interested to hear, as no doubt we'll see them pop up sometime, so always good to know in advance

 

Steve

[Wave9_Lee]

We've had our line replaced over summer and now have a Sophos XG in place, and get no end of problems every day with it. Always something new broken that worked the day before.

 

Management are already considering ditching it and putting our Smoothwall back in place just to get a stable connection again

 

If you find any words of wisdom to any of your issues Wirral would be interested to hear, as no doubt we'll see them pop up sometime, so always good to know in advance

 

Steve

 

Same offer @Steve21 - if you're an existing customer, let me know. If not we can still assist if you need

 

cheers

 

Lee

[Asgard]

 

 

4- We have a few staff who are in the right groups but are knocked off the internet when on domain PCs and reauthenticate every 10 mins - issue with STAS?!?

 

Is anyone available to help, as I am about to have a meltdown. If we need to pay then we will do as I am desperate!!!

 

Thanks

 

I’m taking a guess and @Wave9_Lee may of dealt with this already - STAS issue, we had something similar and Sophos direct diagnosed it as a WMI Logoff detection issue.

 

We turned it off in STAS and all of our issues with domain authentication went away.

[Wirral_Wonderer]

Huge thanks to @Wave9_Lee and their team, they went above and beyond to diagnose the issues and sorted a few others out as well.

 

With hindsight I should have asked for help earlier rather than pressing on trying to resolve it myself whilst also swapping to another MIS. At least my swearing kept the staff out of my way, but it wont last!!!

 

Thanks again.

Edited September 15, 2022 by Wirral_Wonderer