topic web access for local administrators in General Topics

web access for local administrators

Carpetright — Wed, 17 May 2017 13:06:32 GMT

We have our web access rules setup to match up with AD groups, so if you’re not in an web access AD group then you can’t get on the internet.

The issue our PC support guys have is when they log into a PC or laptop as a local administrator they will need internet access to install software such as Office 365, web browsers etc. but cant because they are logged in as a local administrator which obviously isnt in a AD group.

This used to be fine with our old web filter as PC support could manually type in a the proxy address or PAC file into IE to get internet access, this is not possible with the Palo Altos so I was wondering how do people get around this issue?

Thanks

Re: web access for local administrators

Remo — Wed, 17 May 2017 13:23:12 GMT

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/user-id/map-ip-addresses-to-usernames-using-captive-portal

Using the captive portal, which presents a login form in the browser for not yet identified users should probably solve your problem

Re: web access for local administrators

Carpetright — Thu, 18 May 2017 09:51:16 GMT

That sounds like it could do the trick, i will take a look

thanks