Captive Portal + Global Protect

[sahithyan.subbu]

 Hi team,

How to make work the Palo Alto Captive portal after users logged in to Global protect. ?

Users who got connected to GP should get captive portal auth page while they try to use internet.

Is there any way to achieve this ?

[reaper]

hi @sahithyan.subbu 

in the policy > authentication rulebase, create a new rule (at the top of your rulebase) that has 'users' set to 'any' or 'known-users', then set the action to 'default-web-form'

[sahithyan.subbu]

@reaper 

I got your ref from GOT. Good one.

I already configured as per you said,

i have configured authenticatoin rulebase and placed on top and also i have configure agent and captive portal accordingly, but it is not working.

Do u have any document to configure this ??

[reaper]

It will be in my book, stay tuned 😉

Did you set a management profile on the tunnel interface with "response pages" enabled?

[sahithyan.subbu]

Hi @reaper 

yes I did.

[reaper]

Interesting

How did you set the captive portal (redirect, transparent) and how did you configure the auth rule?

Could you try setting redirect mode and set the ip of the tunnel interface

Make sure security policy allows the Cp connection