topic Re: CAPTIVE PORTAL TIME-OUT in General Topics

CAPTIVE PORTAL TIME-OUT

justine_gumba — Wed, 22 Apr 2020 11:09:19 GMT

SETUP: PALO ALTO connected to ACTIVE DIRECTORY for groups
CAPTIVE PORTAL ACTIVATED
idle time-out 500minutes
timer: 600minutes

CLI> show user ip-user-mapping ip x.x.x.x

SCENARIO 1:
user log in to PC > mmp1234
CLI> show user ip-user-mapping ip 1.2.3.4.
Ip address: 1.2.3.4
User: mmp1234
From: UIA
idle-timer:3000s (3k)

SCENARIO 2:
after logging in to PC, user will now login to CAPTIVE PORTAL
CLI> show user ip-user-mapping ip 1.2.3.4.
Ip address: 1.2.3.4
User: mmp1234
From: CP
idle-timer:30000s (30k secs = 500minutes)

PROBLEM:
After 15minutes or more,
CLI> show user ip-user-mapping ip 1.2.3.4.
Ip address: 1.2.3.4
User: mmp1234
From: UIA
timer:3000s

QUESTION>
Why is it changing to UIA? I want CP to remain for 500minutes or 600minutes without any disturbances.

NOTE>
I am sure that this user does not login on any other PC.

Re: CAPTIVE PORTAL TIME-OUT

kiwi — Wed, 22 Apr 2020 13:06:28 GMT

Hi @justine_gumba ,

I'm leaning towards having Client Probing enabled on the UIA.

Hope this helps,

-Kiwi.

Re: CAPTIVE PORTAL TIME-OUT

justine_gumba — Wed, 22 Apr 2020 16:57:46 GMT

Hi @kiwi ,

Enable Probing - not enabled
probe interval- 600min
Enable User Identification Timeout - not enabled
User Identification Timeout - 45min

Re: CAPTIVE PORTAL TIME-OUT

Adriano_R94 — Tue, 27 Feb 2024 13:52:45 GMT

I have a similar case.
When I connect via captive portal it appears and then changes the status to UID.
I still can't understand why this happens, I'd be grateful if someone could clarify this.