topic Re: Captive portal with Client Certificate Profile and fallback to radius/kerberos in General Topics https://live.paloaltonetworks.com/t5/general-topics/captive-portal-with-client-certificate-profile-and-fallback-to/m-p/17795#M12960 <HTML><HEAD></HEAD><BODY><P>Anyone ?</P><P></P><P>Not possible ?</P></BODY></HTML> Fri, 27 Jul 2012 06:54:43 GMT Bart_Jocque 2012-07-27T06:54:43Z Captive portal with Client Certificate Profile and fallback to radius/kerberos https://live.paloaltonetworks.com/t5/general-topics/captive-portal-with-client-certificate-profile-and-fallback-to/m-p/17794#M12959 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>I have the following use case for a large customer :</P><P></P><P>1/ Captive portal authentication with client certificate profiles.</P><P>2/ When the client has no valid cert, an authentication fallback mechanism is required with username/password ( radius or kerberos)</P><P></P><P>I know how to configure both authentication mechanisms seperate , but would it be possible to get them working in a "fallback" combined mode.</P><P>The way I would configure this is with an "authentication sequence" containing both a "client certificate profile" and a "radius profile", but this does not seem to be possible.</P><P></P><P>Anyone knows a workarround ?</P><P></P><P>Thanks !</P><P>Bart</P></BODY></HTML> Tue, 24 Jul 2012 14:32:31 GMT https://live.paloaltonetworks.com/t5/general-topics/captive-portal-with-client-certificate-profile-and-fallback-to/m-p/17794#M12959 Bart_Jocque 2012-07-24T14:32:31Z Re: Captive portal with Client Certificate Profile and fallback to radius/kerberos https://live.paloaltonetworks.com/t5/general-topics/captive-portal-with-client-certificate-profile-and-fallback-to/m-p/17795#M12960 <HTML><HEAD></HEAD><BODY><P>Anyone ?</P><P></P><P>Not possible ?</P></BODY></HTML> Fri, 27 Jul 2012 06:54:43 GMT https://live.paloaltonetworks.com/t5/general-topics/captive-portal-with-client-certificate-profile-and-fallback-to/m-p/17795#M12960 Bart_Jocque 2012-07-27T06:54:43Z Re: Captive portal with Client Certificate Profile and fallback to radius/kerberos https://live.paloaltonetworks.com/t5/general-topics/captive-portal-with-client-certificate-profile-and-fallback-to/m-p/17796#M12961 <HTML><HEAD></HEAD><BODY><P>Hi Bart - did you ever figure out how to accomplish your goal?&nbsp; I'm in a similar situation... I'd like to setup our captive portal for guest users, but use certificates for our ipads.&nbsp; Just curious...</P><P>Erik</P></BODY></HTML> Thu, 13 Sep 2012 22:15:00 GMT https://live.paloaltonetworks.com/t5/general-topics/captive-portal-with-client-certificate-profile-and-fallback-to/m-p/17796#M12961 etank 2012-09-13T22:15:00Z Re: Captive portal with Client Certificate Profile and fallback to radius/kerberos https://live.paloaltonetworks.com/t5/general-topics/captive-portal-with-client-certificate-profile-and-fallback-to/m-p/17797#M12962 <HTML><HEAD></HEAD><BODY><P>Bart,</P><P></P><P>As you have already figured out, this is not possible with the current design we have. If you need this functionality, please contact your SE to file a feature request. As for the authentication sequence, it can also be used for the server profiles and not with the cert profile.</P><P></P><P></P><P>Thanks,</P><P>Sri</P></BODY></HTML> Fri, 14 Sep 2012 00:09:56 GMT https://live.paloaltonetworks.com/t5/general-topics/captive-portal-with-client-certificate-profile-and-fallback-to/m-p/17797#M12962 zarina 2012-09-14T00:09:56Z Re: Captive portal with Client Certificate Profile and fallback to radius/kerberos https://live.paloaltonetworks.com/t5/general-topics/captive-portal-with-client-certificate-profile-and-fallback-to/m-p/17798#M12963 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>I've tried to create a work-arround by adding a second captive portal , but this seems also not to be possible.</P><P>Even a second VSYS will not help, captive portal settings are PER device and not PER vsys.</P><P></P><P>So does this really mean that the only solution would be to buy additional box ?</P></BODY></HTML> Tue, 09 Oct 2012 12:08:48 GMT https://live.paloaltonetworks.com/t5/general-topics/captive-portal-with-client-certificate-profile-and-fallback-to/m-p/17798#M12963 Bart_Jocque 2012-10-09T12:08:48Z