topic Captive Portal as an option in General Topics

Captive Portal as an option

dshue — Fri, 30 Dec 2011 19:20:58 GMT

A few of my rules allow for certain individuals (by way of User-ID) access to download EXE and access most any application. This of course works fine for PCs that are joined to the domain which makes up 99% of our PCs. However, for that 1% that are not on the domain, what's the best way for an individual to optionally supply the proper AD credentials to allow them these elevated privellages if they so choose to need them?

Re: Captive Portal as an option

bpappas — Fri, 30 Dec 2011 23:16:07 GMT

The Captive Portal feature is probably your best bet to identify unknown users who are traversing the firewall.

-Benjamin

Re: Captive Portal as an option

kbrazil — Sat, 31 Dec 2011 00:32:22 GMT

Also, there is a new feature in PAN-OS 4.1 that allows the User-ID Agent to get username to IP mappings from Exchange servers. So if non-windows devices are not logging into the domain, but are logging into email, their user sessions will also be mapped.

Cheers,

Kelly