Captive portal bypass

[oyogeospace]

New to Palo Alto.

is there a simple way to disable/bypass the Captive Portal for a pc based on IP or IP range? Please be detailed since I rarely deal with the PA.

[BPry]

@oyogeospace,

Under the Policies tab look at your Authentication policy entries. For that one IP or IP range you could either exclude the range from your existing policy, or you could create a policy with the action of 'default-no-captive-portal' and place it above everything else, this essentially is similar to just not enabling any policies but may be less work depending on your current policy structure. 

[oyogeospace]

We are on software version 5.0.4 and I do not see those options.

[BPry]

@oyogeospace

Okay ... wow that's old. Under Policies -> Captive Portal what does your existing policy look like? 

FYI, 5.0 hasn't been supported in over two years, and you're not running the last version of that major release. I would highly recommend upgrading this to a supported release. 

[oyogeospace]

we are planning on upgrading soon. I do not see Captive Portal under policies.

[Remo]

There should be a menupoint for caprive portal policies. Unfortunately this release is way to old to provide a screenshot 😛

---

@oyogeospace wrote:

we are planning on upgrading soon.

---

--> Change that to as soon as possible! Operating a security device with a version that was release more than 5 years ago is irresponsible - but thats just my personal opinion. Don't take this personally as I assume you are new there (as you are also now to paloalto) and the admin that was there before you did not do the best job ...

[BPry]

@oyogeospace,

In 5.0 Captive Portal should be under Policies | Captive Portal, so if you can't see it there your only real option would be to look at it in the CLI or through the XML file so you can see how it's configured.