Hi experts,
Suppose that I select AD Query and Browser-Based Authentication as my methods acquiring identity on my network. And I create a rule like this:
![rule.PNG rule.PNG](https://community.checkpoint.com/t5/image/serverpage/image-id/15964i1DDFFFF907B9F116/image-size/large?v=v2&px=999)
To my knowledge, this is what happens in the following situations:
1 - When I user which belongs to the Marketing group (supposing the Marketing Access Role is mapped to the Marketing AD group) logs in and open https://youtube.com, this user can access with no problem.
2 - If a guest user try to access https://youtube.com, it will be redirected to the captive portal to authenticate.
3 - When I user which belongs to the Operations group logs in and open https://youtube.com, this user will be redirected to the captive portal to authenticate.
Am I correct?
Regards,
Julián