Hide captive portal for unknown users

In the firewall rule under the Identity section select 'Match known users' and then select the users/groups you wish to allow access to.

Select the 'Show captive portal' option if you wish the users to login using the web portal

Also if you wish to not show captive portal to unauthenticated users then go to Authentication -> Services

At the very bottom of the page you will see a section labelled 'Actions for Unauthenticated Users (Captive Portal)'

Select NO for the option 'Prompt unauthenticated users to login'

and the XG will no longer show unauthenticated users the captive portal

Evargas,

captive portal will be showed all the time if in the firewall rule the option "show captive portal to unknown users" is checked. So you to make sure to uncheck that option and make sure that your users are authenticated in some way (for example STAS, Radius, SAA, etc).

Otherwise Firewall will not distinguish the one user to another one.

Regards

Also,

if you are on v16.5, you can find more info on captive portal at page 9 of this manual:

/cfs-file/__key/communityserver-discussions-components-files/124/7762.Sophos-XG-Firewall-v16_5F00_05-RN_5F00_v3.3.pdf

Regards

Hello: Muhammad Osama  

With this option no show login link access?

Thank you.

Evargas,

with that option to NO, traffic will be blocked. Please read the PDF I have posted on the previos reply in order to understand the behaviour. There are possible scenario combination.

Thanks

With this option all unauthenticated users will not be shown a captive portal. You will have to make sure that your users authenticate using some other procedure (STAS, Radius, etc)

This and you also have to make sure you have selected 'Match known users' in the firewall rule as well

Hello:

My escenary

I have 3 policies with Active Directory Groups.  Works Fine

NEXT i have a policy  policy for unauthenticated users (work fine) but  for security reasons i would like dont show login link captive portal.

Evargas,

if you want to allow unauthenticated users to surf on internet, make sure to uncheck "match know users" and move this policy down (below any "match know users").

Regards