Captive Portal - Terms of Service

[u13001]

I would like to configure my PA-200 in such a way that when the user tries to browse a web site, he is presented with the captive portal. On this page I would like to display a "Terms of Service" banner telling him about acceptable use etc. I do NOT wish to authenticate individual users.

A simpe banner and an I Accept/Cancel button would suffice. Is there any way to implement this on Palo Alto?

Thanks a lot.

[kalyanram.piratla]

Why use captive portal for this?  Captive Portal is a method used for user-to-ip-mapping wherein the user would pass on the credentials for ip-mapping.  Setting all your URL categories to Continue / Override should be more easy...!!!

Hope this helps..!!!

Regards,

[zarina]

Captive portal is used for ip-user mapping and it is not possible to change the behavior to display only the terms and conditions page. You can achieve this by using URL continue page. You can define your customized URL continue page and then import it to the box.

[u13001]

Thanks guys. I will give this a try tomorrow.

Will it be cached so that the users isnt asked multiple times for different categories?

Also, can this govern other policies, so that the user has to accept before other firewall rules are enabled for him?

[kalyanram.piratla]

"Also, can this govern other policies, so that the user has to accept before other firewall rules are enabled for him?", Can you please elaborate a little more on this.  As per understanding, you want this Acceptance page as and when the user will  open a browser for surfing the internet.

If that is the case, then you will need to attach the URL Filtering profile to all the security rules that allow internet access.

Hope this helps...!!!

Regards,