About Sly_Cooper

All,   I amtesting authentication policy for a certain project and was able to test it successfully with basic configuration. I am looking at a config where a single authentication policy could work across multiple vsys.   Scenario,   Firewall with multi-zone, one of the zones with web-server to intercept and redirect to the captive portal (with MFA). After successful authentication, the firewall will allow RDP access for the systems across multiple zone including non-web server zone. I have multiple environments running behind different vsys and would like to have a single authentication which would give access across multiple vsys. Is this possible? If yes then how? ... View more

Hi All,   I have successfully tested Authentication policy using LDAP, MFA (Okta API), SAML and RADIUS (Okta). I am working on the redundancy scenarios wherein if Okta fails, the fallback would be LDAP. I am using RADIUS (Okta) and LDAP in the Authentication Sequence. I am however unable to get the LDAP (Active Directory) fallback working. I am simulating RADIUS(OKTA) failure by configuring the service route to use the firewall traffic interface and then a security policy to block the RADIUS traffic. I can see that the firewall is successfully blocking RADIUS traffic. I however, want it to proceed to LDAP auth and authenticate considering RADIUS unavailability. I am using default-web-form in the auth policy and CP is set to use the authentication sequence. The authentication logs only show Authentication Failure with the RADIUS server events. What am I missing? Will this config ever work? ... View more

Is it possible to send the logs visible under the "LOGS" menu to external syslog? If yes then how?   Thanks in advance. ... View more