Skip to main content
xXKnightRiderXx
New Member
January 10, 2018
Question

Authentication Page Static Link

  • January 10, 2018
  • 1 reply
  • 5668 views

Hello everybody,

 

I have started to play around with User Authentication as described in this article from the Fortinet Cookbook: http://cookbook.fortinet.com/user-device-authentication/. It works just fine but I have one question: Is there a possibility to create a static URL Link to the Authentication Page?

Let me elaborate a little further: My Fortinet Appliance is within a private Network so whenever I try to access a resource for which an authentication is required I'm forwarded to an URL which looks like this: http://192.168.16.190:1000/fgtauth?030005899b987149. I thought: well maybe it's possible so skip the redirection step and directly request the Authentication page by typing in the following URL: http://192.168.16.190:1000/fgtauth. But this leads to a browser error (in Chrome it says: ERR_EMPTY_RESPONSE) and the authentication page is not loading. It seems the character string at the end of the URL (e.g. 030005899b987149) plays an important role but inserting random characters leads to an error and reusing the same link only works for a limited amount of time. So is there a possibility to have a static link to the authentication page which I can for example bookmark to skip the redirect step?

 

Thank in advance for you help.

 

Greetings,

xXKnightRiderXx

1 reply

xsilver_FTNT
Staff
Staff
January 12, 2018

Hi,

in short answer is no. That random looking string is sort of session magic token. Randomly written stuff do not work as FGT do not have any knowledge about the token you created and so cannot pair browser/your response to auth request done by policy.

If you'd like to have auth done with little effort, and if you are member of MSFT Domain, then consider FSSO or NTLM with browser set to automatically provide auth data to FGT.

Best regards,

Tomas

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT