Skip to main content
FortiKoala
Staff
Staff
October 1, 2018

Technical Tip: Disable Persistent Agent credentials pop-up window

  • October 1, 2018
  • 0 replies
  • 2289 views

Description

 
This article explains how to disable the Persistent Agent credentials pop-up window.
 
Scope
 
FortiNAC and persistent agent.


Solution

 
If the FortiNAC server requires that the host be registered to a user or that a user need to be authenticated (Need to Authenticate state), a request to display the login dialog box is sent to the agent. In certain situations, this functionality may not be desired and could distract the end user.
 
login pa.PNG
This activity can be seen in the agent logs:
 
> Get-Content "C:\ProgramData\Bradford Networks\general.txt" -Wait -tail 1
 

2025-12-12 12:29:09 UTC :: Detected Server Version: 0

2025-12-12 12:29:10 UTC :: SslStreamTransport::sslSendThread calling take()

2025-12-12 12:29:10 UTC :: constructFromBufer verb = Login

2025-12-12 12:29:10 UTC :: handleReceivedPacket() -- received this packet:

Login   <-- FortiNAC sends a login requests and the agent shows the pop up

END of packet

--

 

2025-12-12 12:29:42 UTC :: Sending ACK for 0

2025-12-12 12:29:49 UTC :: IPC Verb = AUTH  <-- user credential are sent by the agent

2025-12-12 12:29:51 UTC :: SslStreamTransport::sslSendThread calling sendImpl()

2025-12-12 12:29:51 UTC :: SslStreamTransport::sslSendThread calling take()

 
The window can be suppressed by disabling the Login Dialog Persistent Agent setting. The setting can be edited directly on the Registry Editor, pushed by Group Policy (GPO) or via a software management program. 
In Microsoft Windows the registry path is on: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Bradford Networks\Persistent Agent
A new value with the name 'LoginDialogDisabled' need to be created as shown below:
 
reg value.PNG

 

Refer to the following sections of the deployment guide for details and similar changes made for macOS or Linux machines: Persistent Agent Deployment and Configuration.