This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Phil_Throumoulos
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Phil_Throumoulos
06-03-2020
6Posts
0Likes
0Solutions
Jun 03, 2020Last Visited
User
Activity
User
Profile
Latest posts by Phil_Throumoulos
| Subject | Views | Posted |
|---|---|---|
| 2000 | 09-21-2017 10:52 AM | |
| 2139 | 09-21-2017 05:50 AM | |
| 2151 | 09-20-2017 11:21 AM | |
| 2195 | 09-19-2017 11:37 AM | |
| 1424 | 08-04-2017 07:59 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 08-04-2017 05:59 AM |
| Date Last Visited | 06-03-2020 03:27 PM |
| Posts | 6 |
09-21-2017
10:52 AM
Ahhhh, yes. What you are saying now makes complete sense to me! I am requiring that everyone authenticate which I do not need. I just need certain users in certain subnets to authenticate. I will create another auth rule and put my servers in it and also change it to no captive portal. Thanks for the extra set of eyes on this BPry!!
... View more
09-21-2017
05:50 AM
Ahh, yes. Sorry, I guess I misunderstood what you were looking for. Here is the screenshot of what you want.
... View more
09-20-2017
11:21 AM
What you are saying makes sense. I am not sure how I would add the exception to say do not authenticate everyone. I have a group of users in AD that should be the only ones effected by the captive portal. Maybe I should put thier group in the SSO rule instead of Domain Users.?
... View more
09-19-2017
11:37 AM
Hello ALL - This is my second post here regarding Captive Portal. I enabled Captive Portal in my environment the other day thinking it would be for webaccess for my users in the event the User ID tool did not work. Upon enabling this feature other rules on my firewall stopped processing since there was no users associated with those rules. Is this really the way that Captive Portal is supposed to work? I have a rule that allows a certain IPA to ping an external resource, when captive portal is enabled the rule stops working till I authenticate through the captive portal and there is a user to IP mapping regadless if my rule has an associated user listed in it. That seems like a huge flaw to me especially since I have service like DNS that do not run as any user. Just so you are all aware, I am currenlty running 2 850's in HA on 8.0.3 I really need a way for users to authenticate for web access if User ID fails without breaking all my other firewall rules. I thought that enabling the captive portal would allow them to authenticate that way. My SSO rule covers my entire subnet as my network environment is flat network with no segregation between servers and clients(this could be changed if needed to get things to work) as I think this might be causing part of the issue. Any help would be appreicated. Thanks!
... View more
08-04-2017
07:59 AM
Thanks for the info Reaper. I thought that NTLM was not the preferred choice for authentication due to it being a legacy authentication source? Our browsers should support NTLM (IE and Chrome) We are pretty mobile, we have users in three buildings that move around all the time unfortunately and several conference room computers where this might not work since different users are logging on to these all-day long. I could see extending the timeout though to a time frame that is more than what I currently have it set to so that they are not being remapped so frequently. We do use mapped drives, I can try the agent to see if that will work for us also. I have purely been using the WMI feature for now. Ok I will test the SSL decryption piece also, I am thinking you are probably right because if I go to cnn.com which is http the SSO piece works just fine and no page is presented to me.
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks