Authentication for generic user account

[COMIP]

Hi,

A client have a several computers with a generic user that logon automaticaly. Actually, with a ISA Server configured as explicit user, the browser prompts user/pass data to access to Internet. What can I do with PaloAlto to make the same? Captive portal is not a solution because all the computers are configured with DHCP option, and I can't configure captive portal for source user, only source ip.

Any idea?

Thanks

[gswcowboy]

You can choose source zone and source address via CP and based on your statement, you should be selective in your choice of IP addresses to be captive portaled.

[Retired Member]

Another thought. If you know the MAC addresses of these specific hosts then you can set your DHCP to assign specific IPs to those host MACs. Preferably you can put those static host mappings such that they would fall into a specific IP subnet or range. Then configure a no-captive-portal rule for just that host range.

-Richard

[gswcowboy]

Good point Richard but correct me if I'm wrong but doesn't he want the redirect page to be provided to the end-users?