Live users are users who are currently signed in to Sophos Firewall.
To disconnect users, select them, and click Disconnect. You can change the notification text. Click Disconnect again.
To sign out a clientless user, don't click Disconnect. Go to Authentication, and change the specific clientless user’s status to inactive. If you’ve disconnected a clientless user and want to sign in the user again, go to Authentication and change the user’s status to inactive and then to active.
Sophos Firewall offers the following types of live users and their client types:
|User type||Client type||Information|
|Normal||Web client (captive portal) |
Authentication agent (Windows, macOS, Linux)
SSO (Sophos client-based single sign-on)
Thin client (SATC)
Android client (authentication agent on Android)
Android web client (captive portal on Android)
iOS client (authentication agent on iOS)
iOS web client (captive portal on iOS)
|Users sign in with their credentials (username and password) through the authentication client on their endpoint or on the captive portal. |
If single sign-on is configured, users are automatically signed in to Sophos Firewall when they sign in on their device.
When you disconnect a user manually, a notification is sent to users who've signed in using the following client types:
|Clientless||Clientless||Clientless users are authenticated by their IP address and are displayed on configuration. Deactivated users don't appear on the list.|
|Guest||Web client (captive portal)||Users sign in as guests through the captive portal.|