topic Re: Authentication Portal logs / troubleshooting in General Topics

Authentication Portal logs / troubleshooting

AaronAxvig — Tue, 17 Jan 2023 15:52:44 GMT

I am having difficulty finding logs and other troubleshooting information for Authentication Portal on PAN-OS 10.2. There are some resources such as this article but it seems to only be useful for older PAN-OS versions where the feature was still called Captive Portal.

If I try to use some of the things that it describes:

> less mp-log appweb3-l3svc.log
/var/log/pan/appweb3-l3svc.log: No such file or directory

> debug l3svc on debug

use useridd debug for l3svc backend debugging

> show counter global | match session_svc

[nothing]

Perhaps a new article "How to Troubleshoot Authentication Portal" should be created.

Re: Authentication Portal logs / troubleshooting

AaronAxvig — Wed, 18 Jan 2023 15:01:12 GMT

authd.log is potentially a replacement for appweb3-l3svc.log? I do see some Authentication Portal stuff get logged in there.

Re: Authentication Portal logs / troubleshooting

TomYoung — Wed, 18 Jan 2023 15:27:19 GMT

Hi @AaronAxvig ,

Monitor > Logs > Authentication will show events related to the Authentication Policy -> https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/monitoring/view-and-manage-logs/log-types-and-severity-levels/authentication-logs.

Thanks,

Tom