Sophos suddenly interferring with RADIUS requests from Aruba WLC

[hallamke]

Hi folks,

 

Bit of an unusla one here. On Monday we sudenly started getting issues with devices on our RADIUS authenticated network dropping off and failing to reconnect.  Error logged on the Aruba controller indicates the server isnt responding. Checking the NPS config on our DC indicates all is well with the service and config.

 

Weird bit is some clients seem to connect and are happy, and others just drop and wont reconnect. On Tuesday the issue seemed to resolve itself beofre I could get to the bottom of it. Today the problem has re-appeared. After an hour of faffing and fielding the neverending stream of calls (🤪) I disabled Sophos on the server. This has brought everything back to life.

 

Before I log this with Sophos support throught I'd run this by her eto see if anyone else has experienced this, and what if any was the eventual solution.

 

As ever any replies / comments greatfully received 😉 

 

Cheers

 

--Keith--    

[synaesthesia]

Nothing like your issue here but might have a distant link - in the last couple of weeks our Sophos has started interfering with certificate distribution/SSL inspection despite it actually being disabled in sophos central. Sites including our MIS every now and then hit "This page isn't secure" prompts and digging into the certificate, rather than finding Smoothwall as the CA as I'd expect, it states Sophos - very odd considering it's disabled!

I have a call open but they're not exactly being quick about it

 

[hallamke]

4 minutes ago, synaesthesia said:

Nothing like your issue here but might have a distant link - in the last couple of weeks our Sophos has started interfering with certificate distribution/SSL inspection despite it actually being disabled in sophos central. Sites including our MIS every now and then hit "This page isn't secure" prompts and digging into the certificate, rather than finding Smoothwall as the CA as I'd expect, it states Sophos - very odd considering it's disabled!

I have a call open but they're not exactly being quick about it

 

Cheers for the reply. Ive checked our settings in Central and likewise these are disabled. I hate these intermittent authentication issues, troubleshooting is a nightmare, to say nothing of managing the support tickets 😵‍💫🤣🤣🤣

 

I've logged it with Sophos support... see what happens. If I ganer anything useful from them I will post here in case it helps someonelse ..

 

Cheers

 

--Keith--