topic Re: Using Captive Portal for Untrust to Trust in General Topics

Using Captive Portal for Untrust to Trust

SoftwareMedia — Wed, 13 Jan 2010 22:48:07 GMT

Is it possible to use captive portal to force a user from the untrust side to authenticat before they can see port 22?

Re: Using Captive Portal for Untrust to Trust

nrice — Thu, 14 Jan 2010 01:06:04 GMT

Captive Portal is more commonly used with traffic going from a trusted to an untrusted zone. It may work with traffic originating in the untrust zone, depending on your network configuration. Please contact Support so that you can discuss your options with them.

Re: Using Captive Portal for Untrust to Trust

Quinton — Thu, 07 Jun 2012 09:54:16 GMT

Just for interest sake, is this possible and has this been done anywhere?

Re: Using Captive Portal for Untrust to Trust

KP — Thu, 07 Jun 2012 17:19:04 GMT

Hello,

Yes it's possible and it's exactly what I'm doing on my box.

FYI, I have a static public IP address and am using many-to-one NAT (PAT) from inside to outside network.

Authentications I tried are local, Kerberos and LDAP (so last two with Active Directory integration). All working but the AD integration really helps if you are already using user-id

It's a rather basic setup, only captive portal, no NTLM or session cookies.

Best regards,

Koen.