Check Point QUANTUM SPARK 1600 - Browser-Based Authentication

Managing Users and Objects
Quantum Spark 1500, 1600, and 1800 Appliances R81.10.X Locally Managed Administration Guide|267
n
User DN - Click Discover for automatic discovery of the DN of the object that represents
that user or enter the user DN manually.
4. To select user groups from specific branches, select the checkbox Use user groups from specific
branch only.
Click Add and enter a branch path in the AD Branch field.
5. Click Apply
You can also add a new AD Domain in the Users & Objects > Authentication Servers page.
Browser-Based Authentication
Blocking unauthenticated users
1. To block access for unauthenticated users when the portal is not available, select Block
unauthenticated users when the captive portal is not applicable.
This configuration option forces users using non-HTTP traffic to log in first through Browser-Based
Authentication.
2. Select if unidentified users are redirected to Captive Portal for All traffic or Specific destinations.
In most cases, all traffic is not used because it is not a seamless identification method.
3. Under Specific destinations, select Internet or Selected network objects.
If you select Selected network objects, select the objects from the list or create new objects.
4. Click Finish.
To edit settings and configure portal customization for Browser-Based Authentication
1. Under Policy Configuration, select Browser-Based Authentication and click Configure.
2. In the Identification tab, you can edit settings configured in the wizard if necessary.
3. In the Customization tab, select the relevant options:
n
Users must agree to the following conditions - You can require that users agree to legal
conditions. In the text box, enter the conditions that are shown to the user.
n
Upload - Lets you upload a company logo. Browse to the logo file and click Apply. The logo
is shown in the Displayed Logo section.
n
Use Default - Uses the default logo.
4. In the Advanced tab:
n
Portal Address - Keep the default setting which is the address the Captive Portal runs on
the Quantum Spark Appliance or enter a different portal address.
n
Session timeout - Sets for how long an authenticated user can access the network or
Internet before they have to authenticate again.