I want to force mandatory authentication on captive portal for users with internet access, because what happens now is that all users are having access to the internet.
even those who are not in any specific internet access group
To enable "Captive portal" authentication for Internet access, under Firewall rule, navigate to "Identity" and select "Match known users" and "Show captive portal to unknown users'.
Also under "Device Access" settings,You need to enable "Captive Portal" under "Authentication Services" options for LAN zone and respective zone in case it is not enabled.
Note : Rule matching will be done from top to bottom. So if there is any network rule on top where above required option under identity is not enabled and that rule allow traffic for entire network for any destination network then "Captive portal" authentication may get bypassed from such rules.
To enable "Captive portal" authentication for Internet access, under Firewall rule, navigate to "Identity" and select "Match known users" and "Show captive portal to unknown users'.
Also under "Device Access" settings,You need to enable "Captive Portal" under "Authentication Services" options for LAN zone and respective zone in case it is not enabled.
Note : Rule matching will be done from top to bottom. So if there is any network rule on top where above required option under identity is not enabled and that rule allow traffic for entire network for any destination network then "Captive portal" authentication may get bypassed from such rules.
