topic Re: Any way to de-auth a user outside of SSH? in General Topics

Any way to de-auth a user outside of SSH?

Lcroce — Wed, 25 Jul 2018 14:36:26 GMT

I know that we can force a logout for a user from the captive portal on the CLI as shown in the link below but is there a way to access this functionality through the web management portal?

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Force-Captive-Portal-Re-Authentication/ta-p/57746

Re: Any way to de-auth a user outside of SSH?

Remo — Thu, 26 Jul 2018 16:33:01 GMT

Hi @Lcroce

In the Web-UI this isn't possible. Another possibility is to do that with the API, so you could write a little script that you could run if you want to de-auth a user.

Re: Any way to de-auth a user outside of SSH?

BPry — Thu, 26 Jul 2018 16:58:48 GMT

@Lcroce,

Advantage to the API method that @Remo proposed is that you could give it to your technical support staff and all they would have to do is specify the username that needs to get de-auth'd.

Re: Any way to de-auth a user outside of SSH?

Lcroce — Thu, 26 Jul 2018 17:35:20 GMT

@RemoIs there a page I can reference?

Re: Any way to de-auth a user outside of SSH?

Remo — Thu, 26 Jul 2018 18:02:36 GMT

@Lcroce

The required commands should be these here:

https://FIREWALL/api/?type=op&cmd=<clear><user-cache><ip></ip></user-cache></clear>&key=APIKEY

https://FIREWALL/api/?type=op&cmd=<clear><user-cache-mp><ip></ip></user-cache-mp></clear>&key=APIKEY

And here is an article to get started with the API: https://live.paloaltonetworks.com/t5/Community-Blog/The-Power-of-XML-API/ba-p/202789

Re: Any way to de-auth a user outside of SSH?

Lcroce — Thu, 26 Jul 2018 20:33:22 GMT

Cool. Thanks for the info.