We have set up a GP slit tunnel we allow SSO using LDAP and Certificate based authentication this allows access to everything in the corporate network. However for applications we have specifically listed by service and destination we have created additional authentication rules that force the user to authenticate using a MFA (Entrust) method through the captive portal. We are having issues narrowing down the DFS file share traffic to create a specific authentication rule. Our goal is to only allow corporate network file share access from a Windows 10 client after the additional MFA authentication has been successful. At the moment the traffic is accessible without the additional MFA (ENTRUST) authentication – HELP!
... View more