Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Anna_Ushakova
Contributor
Jump to solution

Captive portal

Hi!

Users of non-domain PC started having problems with authorization on the captive portal. When you try to enter your login and password - writes that your session has expired. What could be the problem?

 

Thank 😃

0 Kudos
1 Solution

Accepted Solutions
D_W
Advisor

We had this too in the past. Possibly the Multi Portal is not working correctly.
If you have a cluster try to fail over and test. Otherwise try to check the status of the Portal (mpclient status <portalname>)  and or restart the Multiportal.

KR
David

View solution in original post

0 Kudos
7 Replies
Nick_Doropoulos
Advisor

Hi Anna,

Could you please answer the following questions so we can narrow down the potential causes:

  1. How many users are affected?
  2. Is this a new problem? Had the affected users experienced the same symptom before? If not, are you aware of any changes that could have occurred recently?
  3. Is the problem intermittent or consistent?
  4. Can you confirm that the problem occurs across all browsers?

If you could also provide us with the output of the following command it would be great:

[in clish] show version all

Finally, a screenshot of the relevant error would help tremendously as well.

Anna_Ushakova
Contributor
1)All non-domain PC users
2)New problem
3)The problem periodically arises - and not for long holds and leaves. The last 2 weeks became more frequent
4)Yes, all browsers

cp-gw> show version all
Product version Check Point Gaia R80.10
OS build 421
OS kernel version 2.6.18-92cpx86_64
OS edition 64-bit

cp-smart> show version all
Product version Check Point Gaia R80.10
OS build 421
OS kernel version 2.6.18-92cpx86_64
OS edition 64-bit
0 Kudos
Nick_Doropoulos
Advisor

Hi Anna,

Could you provide us with the following as well please:

1) A screenshot of the error the affected users encounter.

2) A screenshot of the gateway's logs while the problem is being reproduced.

 

Thanks.

Anna_Ushakova
Contributor

content_cp011.jpgcontent_cp012.jpg

0 Kudos
Nick_Doropoulos
Advisor

Thanks for providing the requested info. 

The next item that needs to be examined now is the way that Identity Awareness has been configured on your gateway. 

More specifically:

1) What are the identity sources being used here? I am assuming that Browser-Based authentication has to be one of them given that we are trying to achieve access via the Captive Portal.

2) Are the affected users required to have the identity agent installed on their machines?

3) Provided the assumption on Step 1 is correct, navigate to the settings of the Browser-Based Authentication source

1.PNG

and tells us the session length for unregistered guests (since the affected users have not joined the domain and are therefore not known by the gateway).

2.PNG

4) What happens when a domain-registered user tries to log in to the Captive Portal from the same machine? Does the same symptom occur?

D_W
Advisor

We had this too in the past. Possibly the Multi Portal is not working correctly.
If you have a cluster try to fail over and test. Otherwise try to check the status of the Portal (mpclient status <portalname>)  and or restart the Multiportal.

KR
David

0 Kudos
D_W
Advisor
 
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events