Captive Portal - Authentication Method

[eugene]

Hi Palo Altorian,

In Captive Portal setup, does it work with Active Directory or Palo Alto Local User Database?

If yes, can anyone point to me where can i find this documentation? as i was not able to find on the technical documentation. Otherwise, it would be great if someone can shed some lights on doing this.

Thanking you in advance.

[nrice]

Hello Eugene,

You'll need to use AD or Radius in conjunction with Captive Portal, not the Local User Databse.  There are two documents on the Support Portal that will provide configuration guidelines.

User Identification with PAN-OS 2.1

https://support.paloaltonetworks.com/index.php?option=com_pan&task=tech_docs&Itemid=141

and

How to Configure Captive Portal (without Active Directory)

https://live.paloaltonetworks.com/docs/DOC-1159

I

[tanbc3323]

Dear All,

Does PAN-OS 3.1.4 support local authentication? I can find the way how to do the local authentication? Please help? Thanks!

[swhyte]

Captive portal supports authentication via radius, ldap, or local db (this would be users configured on the paloalto device).

thanks,

Stephen

[jeffhooi]

Hi,

Can the captive portal in PAN 3.1.4 os support Cisco tacacs? or any cisco radius server?

[pkruse]

Though we supply step by step instructions for windows 2003 and 2008 this should not be interpreted as us only supporting these two iterations of Radius.

Generally speaking Radius is Radius. It might require some extra effort but the PAN should be able to support any industry standard Radius solution.

~Phil

[migration]

Hi Phil,

thanks for your answer.

As I read in User-Identification-TN (a bit out of dated - 3/09):

"Captive Portal was designed to work with an Active Directory server through its RADIUS interface. If another RADIUS server is used, policy creation is possible, but will be challenging as there is no way to browse a list ofexisting users. In addition, the RADIUS interface does not make user group information available."

Could you write a document, just for istance, for FreeRadius and Captive Portal?

Thanks