Captive Portal Question - Demo Unit

[rjoshua]

Hello everyone,

I'm currently demo'ing a unit configuring it to our projected needs.  One of the things I'm currently working on it user authentication to the net and am hoping you guys can help me out with this.  I have the captiveportal setup using NTLM and the logs show my user authenticating when I goto an outside web address so that seems to be working fine.  However, we have the following scenerio:

Most users will be able to authenticate through the normal NTLM Captive Portal. However, some users are generic users, i.e. app.user, that a nurse would use on a PC at a nurses station. It would have access to a couple of medical websites with out issue and that's it.  But Doc Brown decideds to use this PC to check up on his stocks or the golf scores and puts in www.wasteoftime.com.  I don't want him to be rejected, and I certainly can't ask him to log out of the machine and back in, can I have a web form pop up and ask him for his login with his user and pass instead since the site he's trying to goto is not one authorized under the policy for this generic user?  Can someone point me to such documentation on how to setup a similiar scenerio or provide some quick input?

Thank you for your time,

Raun

[skrall]

Captive portal has only a few fields that can be used to trigger,  Src/Dst Zones and  Src/Dst Address.You should try creating a captive portal page for the Dest Zone = your_internet_Access_zone.  If they surf internal resources, standard policy rules apply. If they use the PDA or tablet to surf the internet they will get a popup screen to authenticate. You will probably have to configure RADIUS authentication to make this work.

Steve Krall