Captive Portal - Email Harvesting

[PeterA]

Hi Guys, I am new to Fortigate and new to this forum.  I have a Fortigate 60e firewall setup and working.  I have UniFi Access Points connected to the wired interface.  This allows me to set up a "Captive Portal" for a specific VLAN (for guest access).  This works great but only askes people to accept the T&Cs when the join the SSID.  I want to harvest emails by having the users provide the email when they join the SSID.  I see this feature is available if using Forit APs, but that option doesn't appear in my case.  Before I build an email harvesting captive portal, does anyone know a way round this or if it is planned to be developed in future releases of FortiOS and if so when. I saw similar posts but no actual solution offered.

Thanks

PeterA

[_aey_]

Hi,

Fortiauthenticator is recommended for this purpose. You cannot send email just by fortigate. You should use both of them.

[PeterA]

Thanks for the reply; however, I am not trying to send emails, just have guests provide their email in order to gain access to internet.  This feature is available for the Captive Portal with FortiAPs but does not appear for a wired connection. This is all described here https://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-authentication-54/CaptivePortals.htm 

Thanks

PeterA

[_aey_]

Now i understood your question. Unfortunately this email collection feature cannot be used for wired connection.

[JeroenK]

Is it really? Because if i select "Security mode" on the interface and set it to "Captive Portal", there is an option "Customize portal message". In the portal message there is an option named "Email Collection". I haven't tried it but it should do the harvesting. 

[nbctcp]

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/20379/retail-environment-guest-access The link said it will working with FortiAP or Fortigate with AP features such as 80cm I want to know as well whether it will work with other AP brand

tq

[nbctcp]

https://pasteboard.co/IQlBl09.png

There is no Email Collection on LAN Interface

tq

[nbctcp]

Email Collection in WIRED is possible, tested by my friend. You can do that as well with non Forti AP by connect a nic with any Bridge AP

Here how to do that

1. Create a Captive Portal

2. open System/Replacement Message

3. copy content of Email Collection and replace or modify content of Login Page

[eric_cs]

hi @nbctcp 

I tried your instructions above however, when I enter the email address and click submit, I'm getting error on the page. The URL shows like this, http://172.18.150.1:1000/fgtauth?4Tredir=http%3A%2F%2Fwww.msftconnecttest.com%2Fredirect&magic=050d0...

I'm not sure if there's anything that needs to be done on the settings.

Can you help me on this please? Thank you.

[amaretto_fortinet]

Thanks, really interesting.
I tried to replace the content on the Login Page, but fortinet presents the Disclaimer Page to the user and then the user can browse, what can I do?

thanks, it would be great if it worked