Is Access Role required for using Captive Portal?

[Network_M]

On R80.10, I want to redirect my specific users to captive portal to authenticate.

I have some difficulties on writing that rule.

I did these things:

1. Enabled identity awareness blade;

2. Enabled captive portal (put tick on CP machines);

3. Created users on right pane, and gave them CheckPoint password.

In the policy, while writing rule, I did:

Source: group of hosts (for example, 5 ip addresses);

Destination: Internet

Service: Any

Action: Accept (display Captive Portal)

Will my rule work? I do not know where to use Access Role.

What is Access Role? Is it required to use? What does it do?

In my rule, where do I have to use it?

Thank you!

[_Val_ · Accepted solution]

Identity Awareness rules require Access Role as a source and not IP addresses. Also, only HTTP and HTTPS will be redirected to captive portal, so use Service tab accordingly.

For more information about Identity awareness, look into Identity Awareness R80.10 Administration Guide 

Access Role object creation and use is in the guide.

[Network_M]

I did as you said, it is working, thank you.

All HTTP and HTTPS are redirected to captive portal (browser based).

Can I modify settings of captive portal like timeout (minutes), asking for login each time when browser is opened newly?

[_Val_]

Yes you can, look into the guide I have provided you