Skip to main content
ByteHaven
ByteHaven
Explorer III
March 5, 2026
Solved

Captive portal Guest vs user

  • March 5, 2026
  • 3 replies
  • 422 views

Hello everyone,

 

So I know when a guest (rogue) first connects to a switch port, they are isolated and need to register/auth with the captive portal based of the group membership/enforcement group configured on that port. I get this part.

 

My question is for corporate devices, do they need to authenticate via the captive portal each time they connect ?

 

BR,

Best answer by AEK

Hi BH

Corp hosts "should" have persistent agent, so authenticate with it and not with portal.

3 replies

AEK
SuperUser
AEKAnswer
SuperUser
March 5, 2026

Hi BH

Corp hosts "should" have persistent agent, so authenticate with it and not with portal.

AEK
ByteHaven
ByteHavenAuthor
Explorer III
March 9, 2026

Correct me if I'm wrong, I have to create : 

1/ User & host profile : 

  • Who/what :
    • Where : Host => Persistent agent => yes

2/ Network access : 

  • Configuration : 
    • logical network : *my production network*
    • User/host profile : *previously configured*

Is this enough and correct ?

AEK
SuperUser
AEK
SuperUser
March 12, 2026

It is basically fine, you may just need add the AD group if required.

As you see there are many other checks that you can perform in UHP, but the mentiond UHP config is a good starting point.

AEK
ByteHaven
ByteHavenAuthor
Explorer III
March 12, 2026

Add the AD group. You mean in the user/host profiles, like below ? (for the other part there is only Microsoft Entra ID and local that are available).Screenshot 2026-03-12 122121.png

 

 

ebilcari
Staff
ebilcari
Staff
March 10, 2026

The registration process is usually required only once, and the host remains registered until it is aged out or manually deleted. In addition, an authentication policy can also be applied, requiring authentication either periodically or upon reconnection.

Emirjon
ByteHaven
ByteHavenAuthor
Explorer III
March 12, 2026

Thank you for your answer Emirjon.

 

Everyone is automatically isolated, at first. When they register the first time, they don't need to register again. Got it.

 

BR,

Terms & ConditionsAccessibility statement