Identity Awareness failsafe

[Alex_Sykes]

Hi,

We're deploying new gateways heavily reliant on IA and we've had a few IA problems, most of which are resolved now fortunately, however, we're looking at a failsafe should IA not work again.

Does anyone on here have any recommendations?  Captive Portal is one option, but that will only work for HTTP/s applications (unless I'm mistaken).  What happens if IA fails and users need to access applications using SSH or any other non HTTP/s protocol?

Thanks

Alex

[PhoneBoy]

Captive Portal only works for HTTP(S) connections.
Presumably users could authenticate themselves using this mechanism prior to using SSH or other protocols.
Users could also theoretically authenticate to some other server using RADIUS then set up RADIUS Accounting so that information is imported via Identity Awareness.