Advice on getting Aruba, NPS and Sophos XGS to play nicely

[yjgygyufgvfghfh]

Hi everyone,

I’m currently working on setting up our school Wi-Fi and I’m running into some issues. I’d appreciate any advice you can offer.

We’re using a Ruckus VSZ system with CloudPath for onboarding, but I’m not happy with the costs and complexity of CloudPath. I’ve been testing an Aruba AP, but I’m hitting similar roadblocks as we did with VSZ before we got CloudPath.

Here’s what I’m looking for in terms of Wi-Fi networks:

1. WifiPSK – This is for admin use only, essentially like plugging an Ethernet cable into the network.
2. WifiUsers – This is for staff and students. I want them to authenticate and have the same web access they’d get on a domain PC (with the same filters and restrictions).
3. WifiGuests – This is for visitors. I need a simple login system (sponsor or social login) that lets us log email addresses for duty-of-care purposes.

For our system, other than the VSZ or test Aruba AP, we have Windows 2022 AD servers (using LDAP or RADIUS via NPS) and everything goes out through a Sophos XGS firewall.

At the moment, I can get a user to authenticate via NPS, and I can see their username passed to the Aruba controller, but Sophos sees them as an anonymous user and blocks them.

Can anyone point out what I might be missing or any suggestions to fix this?

Thanks in advance for your help!