topic Re: How to force user sign in to Quantum SASE(Perimeter 81) agent? in SASE and Remote Access

How to force user sign in to Quantum SASE(Perimeter 81) agent?

Wei_Soon_Heng — Tue, 30 Jan 2024 02:20:38 GMT

Hi All,

I am currently running lab test for my client that want to use SWG(Secure Web Gateway only, not included VPN.
I realized that users must sign in to Perimeter81 agent so that their traffic to internet will get inspected by SWG.
But what if the user does not sign-in manually into the agent? Does we have an options to force user sign-in into agent in order to gain internet access or only allow Perimeter-81 authenticated user go to internet?

There is an options "Connect on Launch" and "Disable Sign-Out" for users but it's still need user to sign-in manually for first time. This will lead to the I.T security administrator need to monitoring every users make sure them to sign-in to agent in very passive way.

I believe other solution(Like Forcepoint ONE) do have feature called "Contextual access control" that make users cannot browse the
internet unless they are authenticated by Forcepoint ONE.

I wish someone can enlighten me on this scenario.

Thanks.

Re: How to force user sign in to Quantum SASE(Perimeter 81) agent?

PhoneBoy — Tue, 13 Feb 2024 22:13:50 GMT

At the moment, this isn't possible.
However, it is something we plan to address in Q2 2024.

Re: How to force user sign in to Quantum SASE(Perimeter 81) agent?

the_rock — Wed, 14 Feb 2024 02:09:19 GMT

Phoneboy is correct. We had presentation from Sales person at Perimeter 81 and exact same question came up and he said it may come some time this year, but was not sure when.

Best,

Andy

Re: How to force user sign in to Quantum SASE(Perimeter 81) agent?

rlopes — Wed, 03 Apr 2024 00:44:11 GMT

Update: with the current agent version 10.5 we do indeed require and initial login, after which we can cache SWG policies to make security features work regardless of user sign-in status. In a Q3 release we will be able to associate the agent to a user upon install, without requiring an initial login and supporting policy updates.