Exemption some users from captive portal display

Lawrence,

in order to create an exception for those users you have 2 ways:

• create a top firewall rule applied to source network (and here you add the IP used by those users) and you uncheck "match know users"
• on the firewall rule where captive portal and match know users is checked, add only the users that need to be authenticated and then create an above rule where you allow only the users that need exceptions without checking "show captive portal". Here make sure the users authenticate in some way (Sophos client agent, AD, Radius) or use Clientless users.

More info on how captive portal works here:

https://community.sophos.com/cfs-file/__key/communityserver-blogs-components-weblogfiles/00-00-00-00-06/Sophos-XG-Firewall-v16_5F00_05-RN_5F00_v3.3.pdf

Page 9

Regards

Lawrence,

in order to create an exception for those users you have 2 ways:

• create a top firewall rule applied to source network (and here you add the IP used by those users) and you uncheck "match know users"
• on the firewall rule where captive portal and match know users is checked, add only the users that need to be authenticated and then create an above rule where you allow only the users that need exceptions without checking "show captive portal". Here make sure the users authenticate in some way (Sophos client agent, AD, Radius) or use Clientless users.

More info on how captive portal works here:

https://community.sophos.com/cfs-file/__key/communityserver-blogs-components-weblogfiles/00-00-00-00-06/Sophos-XG-Firewall-v16_5F00_05-RN_5F00_v3.3.pdf

Page 9

Regards

Thanks lferrara. However a case whereby everyone is on a DHCP network? can the second option solve that? 

Use dhcp reservation can do the trick to assign always the same ip to those users by mac-address.

Regards