topic Re: Captive Portal - Authentication Method in General Topics

Captive Portal - Authentication Method

eugene — Mon, 18 Jan 2010 02:51:51 GMT

Hi Palo Altorian,

In Captive Portal setup, does it work with Active Directory or Palo Alto Local User Database?

If yes, can anyone point to me where can i find this documentation? as i was not able to find on the technical documentation. Otherwise, it would be great if someone can shed some lights on doing this.

Thanking you in advance.

Re: Captive Portal - Authentication Method

nrice — Mon, 18 Jan 2010 18:46:08 GMT

Hello Eugene,

You'll need to use AD or Radius in conjunction with Captive Portal, not the Local User Databse. There are two documents on the Support Portal that will provide configuration guidelines.

User Identification with PAN-OS 2.1

https://support.paloaltonetworks.com/index.php?option=com_pan&task=tech_docs&Itemid=141

and

How to Configure Captive Portal (without Active Directory)

https://live.paloaltonetworks.com/docs/DOC-1159

Re: Captive Portal - Authentication Method

tanbc3323 — Thu, 16 Sep 2010 03:50:19 GMT

Dear All,

Does PAN-OS 3.1.4 support local authentication? I can find the way how to do the local authentication? Please help? Thanks!

Re: Captive Portal - Authentication Method

swhyte — Fri, 17 Sep 2010 19:06:21 GMT

Captive portal supports authentication via radius, ldap, or local db (this would be users configured on the paloalto device).

thanks,

Stephen

Re: Captive Portal - Authentication Method

jeffhooi — Thu, 11 Nov 2010 03:26:49 GMT

Hi,

Can the captive portal in PAN 3.1.4 os support Cisco tacacs? or any cisco radius server?

Re: Captive Portal - Authentication Method

pkruse — Tue, 16 Nov 2010 15:33:03 GMT

Though we supply step by step instructions for windows 2003 and 2008 this should not be interpreted as us only supporting these two iterations of Radius.

Generally speaking Radius is Radius. It might require some extra effort but the PAN should be able to support any industry standard Radius solution.

~Phil

Re: Captive Portal - Authentication Method

migration — Sun, 23 Jan 2011 11:36:41 GMT

Hi Phil,

thanks for your answer.

As I read in User-Identification-TN (a bit out of dated - 3/09):

"Captive Portal was designed to work with an Active Directory server through its RADIUS interface. If another RADIUS server is used, policy creation is possible, but will be challenging as there is no way to browse a list ofexisting users. In addition, the RADIUS interface does not make user group information available."

Could you write a document, just for istance, for FreeRadius and Captive Portal?

Thanks