Any way to de-auth a user outside of SSH?

[Lcroce]

I know that we can force a logout for a user from the captive portal on the CLI as shown in the link below but is there a way to access this functionality through the web management portal?

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Force-Captive-Portal-Re-Authenticati...

[Remo]

Hi @Lcroce

In the Web-UI this isn't possible. Another possibility is to do that with the API, so you could write a little script that you could run if you want to de-auth a user.

[BPry]

@Lcroce,

Advantage to the API method that @Remo proposed is that you could give it to your technical support staff and all they would have to do is specify the username that needs to get de-auth'd. 

[Lcroce]

@RemoIs there a page I can reference?

[Remo · Accepted solution]

@Lcroce

The required commands should be these here:

https://FIREWALL/api/?type=op&cmd=<clear><user-cache><ip></ip></user-cache></clear>&key=APIKEY

https://FIREWALL/api/?type=op&cmd=<clear><user-cache-mp><ip></ip></user-cache-mp></clear>&key=APIKEY

And here is an article to get started with the API: https://live.paloaltonetworks.com/t5/Community-Blog/The-Power-of-XML-API/ba-p/202789

[Lcroce]

Cool.  Thanks for the info.