Captive Portal on second firewall

Remo — Fri, 17 Aug 2018 16:32:27 GMT

Hi community

Most of you know about the captive portal feature on paloalto firewalls, to get user-ids for not yet somehow authenticated users. All this is also well documented exept this situation:

I was wondering if it is possible to configure the captive portal redirect host to an FQDN which points to an interface on another paloalto firewall. Then the user logs in there and the mapping will be redistributed to the first firewall which initiated the redirect. Technically this seems perfectly possible, but I wondet if the redistribution is fast enough that the first firewall knows about the mapping when the second firewall redirects the user back to the initial website that the user tried to open. Has anyone already configured the captive portal this way and could maybe already confirm this works?

(I hope my explanation is not too confusing 😛 )

Thanks in advance,

Remo

Re: Captive Portal on second firewall

reaper — Wed, 22 Aug 2018 09:06:14 GMT

@Remo I feel like I should challenge you to try and set it up, document your findings and then publish your journey here as a guest article 😉

topic Re: Captive Portal on second firewall in General Topics

Captive Portal on second firewall

Re: Captive Portal on second firewall