Hide captive portal for unknown users

Question

How can dont show captive portal for for unknown users in policy with web filtering

Muhammad Osama · Answer

In the firewall rule under the Identity section select 'Match known users' and then select the users/groups you wish to allow access to. 
 Select the 'Show captive portal' option if you wish the users to login using the web portal

Muhammad Osama · Answer

Also if you wish to not show captive portal to unauthenticated users then go to Authentication -> Services 
 At the very bottom of the page you will see a section labelled 'Actions for Unauthenticated Users (Captive Portal)' 
 Select NO for the option 'Prompt unauthenticated users to login' 
 and the XG will no longer show unauthenticated users the captive portal

lferrara · Answer

Evargas, 
 captive portal will be showed all the time if in the firewall rule the option "show captive portal to unknown users" is checked. So you to make sure to uncheck that option and make sure that your users are authenticated in some way (for example STAS, Radius, SAA, etc). 
 Otherwise Firewall will not distinguish the one user to another one. 
 Regards

lferrara · Answer

Also, 
 if you are on v16.5, you can find more info on captive portal at page 9 of this manual: 
 /cfs-file/__key/communityserver-discussions-components-files/124/7762.Sophos-XG-Firewall-v16_5F00_05-RN_5F00_v3.3.pdf 
 Regards

Muhammad Osama · Answer

With this option all unauthenticated users will not be shown a captive portal. You will have to make sure that your users authenticate using some other procedure (STAS, Radius, etc) 
 This and you also have to make sure you have selected 'Match known users' in the firewall rule as well

lferrara · Answer

Evargas, 
 if you want to allow unauthenticated users to surf on internet, make sure to uncheck "match know users" and move this policy down (below any "match know users"). 
 Regards