About Sly_Cooper

All,   I amtesting authentication policy for a certain project and was able to test it successfully with basic configuration. I am looking at a config where a single authentication policy could work across multiple vsys.   Scenario,   Firewall with multi-zone, one of the zones with web-server to intercept and redirect to the captive portal (with MFA). After successful authentication, the firewall will allow RDP access for the systems across multiple zone including non-web server zone. I have multiple environments running behind different vsys and would like to have a single authentication which would give access across multiple vsys. Is this possible? If yes then how? ... View more

Hi All,   I have successfully tested Authentication policy using LDAP, MFA (Okta API), SAML and RADIUS (Okta). I am working on the redundancy scenarios wherein if Okta fails, the fallback would be LDAP. I am using RADIUS (Okta) and LDAP in the Authentication Sequence. I am however unable to get the LDAP (Active Directory) fallback working. I am simulating RADIUS(OKTA) failure by configuring the service route to use the firewall traffic interface and then a security policy to block the RADIUS traffic. I can see that the firewall is successfully blocking RADIUS traffic. I however, want it to proceed to LDAP auth and authenticate considering RADIUS unavailability. I am using default-web-form in the auth policy and CP is set to use the authentication sequence. The authentication logs only show Authentication Failure with the RADIUS server events. What am I missing? Will this config ever work? ... View more

I am testing Captive Portal certificate authentication with enterprise PKI and it is not working. I have imported and configured cert profile using the enterprise root CA. When tried from the client machine, the request gets redirected to the captive portal page and asks for the client cert. Nothing happens when I select the client cert from the browser or the connection is reset over time. There are no logs generated under Authentication logs. How can I troubleshoot the issue? The captive portal is setup in a Redirect mode and the firewall intercepts requests and redirect to the required interface for authentication.  If I am using Certificate Authentication, then do I need to still utilize "Authentication Profile" under Captive Portal settings? ... View more

Is it possible to send the logs visible under the "LOGS" menu to external syslog? If yes then how?   Thanks in advance. ... View more