topic Re: Captive portal bypass in General Topics

Captive portal bypass

oyogeospace — Wed, 12 Dec 2018 16:34:54 GMT

New to Palo Alto.

is there a simple way to disable/bypass the Captive Portal for a pc based on IP or IP range? Please be detailed since I rarely deal with the PA.

Re: Captive portal bypass

BPry — Wed, 12 Dec 2018 18:18:22 GMT

@oyogeospace,

Under the Policies tab look at your Authentication policy entries. For that one IP or IP range you could either exclude the range from your existing policy, or you could create a policy with the action of 'default-no-captive-portal' and place it above everything else, this essentially is similar to just not enabling any policies but may be less work depending on your current policy structure.

Re: Captive portal bypass

oyogeospace — Thu, 13 Dec 2018 20:25:59 GMT

We are on software version 5.0.4 and I do not see those options.

Re: Captive portal bypass

BPry — Thu, 13 Dec 2018 20:31:25 GMT

@oyogeospace

Okay ... wow that's old. Under Policies -> Captive Portal what does your existing policy look like?

FYI, 5.0 hasn't been supported in over two years, and you're not running the last version of that major release. I would highly recommend upgrading this to a supported release.

Re: Captive portal bypass

oyogeospace — Thu, 13 Dec 2018 20:39:32 GMT

we are planning on upgrading soon. I do not see Captive Portal under policies.

Re: Captive portal bypass

Remo — Thu, 13 Dec 2018 21:18:43 GMT

There should be a menupoint for caprive portal policies. Unfortunately this release is way to old to provide a screenshot 😛

@oyogeospace wrote:
we are planning on upgrading soon.

--> Change that to as soon as possible! Operating a security device with a version that was release more than 5 years ago is irresponsible - but thats just my personal opinion. Don't take this personally as I assume you are new there (as you are also now to paloalto) and the admin that was there before you did not do the best job ...

Re: Captive portal bypass

BPry — Thu, 13 Dec 2018 22:27:35 GMT

@oyogeospace,

In 5.0 Captive Portal should be under Policies | Captive Portal, so if you can't see it there your only real option would be to look at it in the CLI or through the XML file so you can see how it's configured.