topic Captive Portal + Global Protect in General Topics

Captive Portal + Global Protect

sahithyan.subbu — Tue, 09 Jun 2020 12:17:06 GMT

Hi team,

How to make work the Palo Alto Captive portal after users logged in to Global protect. ?

Users who got connected to GP should get captive portal auth page while they try to use internet.

Is there any way to achieve this ?

Re: Captive Portal + Global Protect

reaper — Wed, 10 Jun 2020 09:42:14 GMT

hi @sahithyan.subbu

in the policy > authentication rulebase, create a new rule (at the top of your rulebase) that has 'users' set to 'any' or 'known-users', then set the action to 'default-web-form'

Re: Captive Portal + Global Protect

sahithyan.subbu — Wed, 10 Jun 2020 11:37:55 GMT

@reaper

I got your ref from GOT. Good one.

I already configured as per you said,

i have configured authenticatoin rulebase and placed on top and also i have configure agent and captive portal accordingly, but it is not working.

Do u have any document to configure this ??

Re: Captive Portal + Global Protect

reaper — Wed, 10 Jun 2020 11:47:35 GMT

It will be in my book, stay tuned 😉

Did you set a management profile on the tunnel interface with "response pages" enabled?

Re: Captive Portal + Global Protect

sahithyan.subbu — Thu, 11 Jun 2020 07:22:53 GMT

Hi @reaper

yes I did.

Re: Captive Portal + Global Protect

reaper — Thu, 11 Jun 2020 08:07:17 GMT

Interesting

How did you set the captive portal (redirect, transparent) and how did you configure the auth rule?

Could you try setting redirect mode and set the ip of the tunnel interface

Make sure security policy allows the Cp connection