Stormshield SN series - Captive Portal Tab; Captive Portal

To Next Page

To Previous Page

Default authentication

method

Select the method that will be applied when the Default method is selected in the

authentication policy. The methods offered are those added to the table of available

methods.

"Captive portal" tab

For the sake of strengthening security, the connection to the authentication portal and to the Web

administration interface is possible only by forcing certain options in the SSL protocol. Version

SSLv3 is disabled and the TLS versions enabled, according to the recommendations given by the

French Network and Information Security Agency (ANSSI).

As these options are not supported in Internet Explorer versions 6, 7 and 8, you are advised to

use a higher version of this browser. Nonetheless, this mode may be disabled via command line

in the CLI (CONFIG AUTH HTTPS sslparanoiac=0 / CONFIG AUTH ACTIVATE).

The address of the captive or authentication portal is hosted on the firewall and accessible at:

https://<ip_address>/auth

The captive portal has to be enabled for all authentication methods, except for the SSO agent.

Captive portal

Authentication profile and interface match

This table allows associating an authentication profile (profile of the captive portal) defined earlier

with an interface on the firewall. It is possible to Add or Delete a match rule by clicking on the

corresponding buttons.

Interface Select the network interface with which a profile of the captive portal must be

associated. This can be an Ethernet interface (in, out ...), a modem or an IPSec

interface.

Profile Select the profile to be associated with the network interface.

If the Enable captive portal checkbox was not selected in the chosen profile, the name

of the profile will follow the icon

Default method or

Other manuals for Stormshield SN series