topic Captive - Portal Logout Options in GlobalProtect Discussions

Captive - Portal Logout Options

vishal1379 — Thu, 30 Jul 2020 11:11:00 GMT

Hello Techies,

Can anyone please help to provide a solution if we want to enable an option of logout feature which can clear user-mapping / session from the firewall in the backend.

We are just using the default captive portal page and not having any other server

Firewall : 7K

OS : 8.1.13

@Remo @kiwi

Re: Captive - Portal Logout Options

Remo — Thu, 30 Jul 2020 18:54:46 GMT

Hi @vishal1379

the default captive portal currently does not have such a feature like a logout button. If you need something like that, probably the only way is to implement something outside the firewall on a webserver.

But what the feature "Captive Portal Session Cookie timeout" could be something you are looking for. When setting this timeout low enough the user will be logged out when he/she does no longer browse the internet - if if the browser will be closed.

https://live.paloaltonetworks.com/t5/best-practice-assessment-device/user-id-captive-portal-session-cookie-timeout/ta-p/338149

Re: Captive - Portal Logout Options

vishal1379 — Thu, 30 Jul 2020 19:57:53 GMT

I tried tweaking the timers but it didn't help much.

Idle Time : 1 min

Timeout : 1 min

Session Cookies : yes

Session timeout : 60 mins

The problem is firewall is seeing the timer as 1 minute only and disconnecting the session for users even if the browser window ( user authenticated tab ) stays active / un-closed

I am wondering if there is something else that I can do..

Re: Captive - Portal Logout Options

Ana_Munoz — Thu, 21 Oct 2021 23:12:45 GMT

Hello Vishal1379

With that configuration but Maybe you could try remove session cookie.