10-20-2020 05:06 AM
HI all
We have a Palo Alto deployed in AWS and have a requirement to check for a users AD group before letting them into the network.
We cannot use User ID Agent as we are not allowed to set up connections to domain controllers as we have over 10 and the traffic load will be too much at the moment. So only option is to use kerberos to check user group.
However Palo Alto docs say Captive Portal re direct for kerberos does not support SSL Decryption.
Does this mean the Captive portal page itself cannot use inbound decryption or any URLs cannot use it if we enable CP?
I.E User on WAN browses www.application.domain.com and the Palo Alto redirects to captive portal on www.portal.domain.com and does the Auth then redirects back to original URL. So in this this can we still keep SSL decrypt on the original URL and disable it on CP URL?
What other options are there?
Thanks
11-23-2020 07:11 AM - edited 11-23-2020 07:12 AM
any solution. the samething i am trying in Azure cloud
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
