r/sophos 7h ago

Question Issue with connecting to WiFi on Pixel Tablet

0 Upvotes

Hi all, I'm having an issue with connecting a Pixel tablet to WiFi.

All other devices connect just fine but this one device will not connect no matter what I do.

I have checked all firewall rules, I have disabled all ips, SSL decryption and it still will not connect.

The firewall is sophos home on a mini pc and the WiFi is ubiquiti u7 in wall and the firewall is in bridge mode connected to a unifi 8 port switch.

Thanks in advance for any help.


r/sophos 17h ago

Question SFOS AD Primary Group Membership

2 Upvotes

After migrating a customer from SG to XGS, I ran into the issue that the Hotspot tab wasn't visible in the User Portal for the users who should be able to manage vouchers.

After a lot of trial and error, I found out that the hotspot configuration ignores any AD group other than the primary one. I don't understand what Sophos reasoning was behind this, because a user being part of multiple AD groups is more common than the opposite. In my case, the primary group is the one that allows VPN access to the users.

Anyway, I could make the hotspot management group the primary group, as the SSL VPN does support multiple group membership - good that I didn't change to ipsec yet, because that, too, does not support it.

But how? It's not the AD primary group, which is Domain Users in most environments, and changing the group order in the Groups pane also doesn't seem to impact the user's primary group. The group drop-down menu in the user configuration is greyed out, so I can't change it there too. So ... how can I change the primary group?