Configure Captive Portal--URL Filtering

[Networking2017]

Running a PA-820 

Software Version

8.1.10

I run a bandwidth usage report that shows ip addresses using bandwidth, but no domain username.  How can I get the non-Domain devices such as byod to authenticate to the network before gaining network access?  My goal is to be able to run a report and see which devices and which credentials are using bandwidth.

Also, I do not decrypt ssl.  How can I view a URL report for users that are going to amazon.com?  I didnt' get any hits on my report, until i added a URL Filtering rule for the Shopping category to Alert..  Any thoughts?

Thanks

[reaper]

You can set up captive portal so unknown users are required to login before they're able to get anywhere

To get URL information, you need to have a URL filtering profile in the rule, else URL lookups will be skipped

[Networking2017]

Thanks.  Is there a setting that exclude devices such as domain joined computers, where the credentials are already known?  I don't want computers that are already authenticated to get challenged.

[reaper · Accepted solution]

Yes

Do captive portal only for unknown users

 

[Networking2017]

Thank you.  We will try this out.

[Networking2017]

thank you.  This appears to be working with only capturing unknown users with captive portal.