PaloAlto | Captive Portal user-ID

 Berikut Topologinya

1.Create User dan Group : Device |  Local User Database (Users  & Users Group)

2. Create Authentication Profile

3. Seiting User Identification | Authentication Portal Setting

4. Interface Mgmt (Enable User-ID, Resoponse Pages)

5. Zone Inside (Enable User Identification & Enabled Device Identification)

6. Object | Authentication Clone Authentication-Form from existing form. Misalnya buat namanya My_Authentiocation.

7. Polices | Authentication (Inside to Outside --> My_Authentication)

8. Polices | Security (Source IP any dan Source-User: tentukan user dan policy aksesnya)

 

 

 

 

 Done..
Testing & Verifikasi

Verifkasi
show  user ip-user-mapping all

Catatan:Jika rule sepert ini:
user1 : blok akses facebook, tp akses lain di ijinkan. Rule ditentukan by source user
user2 : blok akses instagram, tp akses lain di ijinkan. Rule ditentukan by source use

Done...

Berbagi :