Captive Portal Policy

[mbsm]

Hi CheckMates,

I currently enabled Browser-Based Authentication and i want to know how this will work.

User1 is a Member of SecurityGroup2 & 3 on the AD Server

Here's the Access Roles details:

-WebBrowsing_Access (Network: Any; User: SecurityGroup1; Machine: Any)

-Youtube_Access (Network: Any; User: SecurityGroup2; Machine: Any)

-Social_Networking_Access (Network: Any; User: SecurityGroup3; Machine: Any)

Here's the Policies:

1. Policy Name: Youtube; Src:Youtube_Access; Dst:Internet; Action:Accept

2. Policy Name: SocialNetworking; Src:Social_Networking_Access; Dst:Internet; Action:Accept

3. Policy Name: WebBrowsing_NoYoutubeSocialNet; Src:WebBrowsing_Access; Dst:Internet; Action:Accept(Captive Portal)

When User1 access Youtube/Social Network Sites, is the traffic will hit the Policy #3 and redirected to Captive Portal? If yes, when User1 access Youtube or Social Network sites, is the traffic hit either policy #1 or #2?

Thank you,

[PhoneBoy]

The content of the services/application column for the rules is needed to accurately answer this question.

[mbsm]

Here's the services & application column

[PhoneBoy · Accepted solution]

As User1 will never match the Source of Rule 3 (i.e. because they are NOT in SecurityGroup1), Captive Portal should not activate for this user.