Technical Tip: Force Captive Portal logout

[zzarrouk]

Description
This article describes the necessary configuration to allow the captive portal logged on user to force a logoff.

Solution
There is a configuration option that can be enabled on the CLI which will make the authentication keep alive and the user can logout.

If the fortigate in VDOM:

#config global
config system global
set auth-keepalive enable
end

Authentication keep alive keeps authenticated firewall sessions from ending when the authentication timeout ends.
When enabled, an HTML page will be displayed and the firewall authentication keep alive will prevent sessions from ending when the authentication timeout ends.
In that page, the user can logout completely from the captive portal as well.