topic Re: Authentication for generic user account in General Topics

Authentication for generic user account

COMIP — Fri, 04 Nov 2011 21:08:01 GMT

Hi,

A client have a several computers with a generic user that logon automaticaly. Actually, with a ISA Server configured as explicit user, the browser prompts user/pass data to access to Internet. What can I do with PaloAlto to make the same? Captive portal is not a solution because all the computers are configured with DHCP option, and I can't configure captive portal for source user, only source ip.

Any idea?

Thanks

Re: Authentication for generic user account

gswcowboy — Sun, 06 Nov 2011 03:10:54 GMT

You can choose source zone and source address via CP and based on your statement, you should be selective in your choice of IP addresses to be captive portaled.

Re: Authentication for generic user account

Retired Member — Sun, 06 Nov 2011 03:53:46 GMT

Another thought. If you know the MAC addresses of these specific hosts then you can set your DHCP to assign specific IPs to those host MACs. Preferably you can put those static host mappings such that they would fall into a specific IP subnet or range. Then configure a no-captive-portal rule for just that host range.

-Richard

Re: Authentication for generic user account

gswcowboy — Sun, 06 Nov 2011 03:57:54 GMT

Good point Richard but correct me if I'm wrong but doesn't he want the redirect page to be provided to the end-users?