End-of-Life (EoL)

Captive Portal

If the firewall or the User-ID agent can’t map an IP address to a username—for example, if the user isn’t logged in or uses an operating system such as Linux that your domain servers don’t support—you can configure Captive Portal. Any web traffic (HTTP or HTTPS) that matches a Captive Portal policy rule requires user authentication. You can base the authentication on a transparent browser-challenge (Kerberos single sign-on (SSO) or NT LAN Manager (NTLM) in Captive Portal Authentication Methods authentication), web form (for RADIUS, TACACS+, LDAP, Kerberos, or local database authentication), or client certificates. For details, see Map IP Addresses to Usernames Using Captive Portal.

Recommended For You