Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
roksakure
New Contributor

Fortigate and a 3rd party captive portal

Hey all,

We use fortigates across all of sites and I'm in the process of setting up a captive portal to use with the wifi network, I noticed that fortigate has the option to enable captive portal and use an external one,

I enabled it and pointed it at the captive software, the issue I'm finding is it goes to a Fortigate Captive portal first and not to the 3rd party one,

Has anyone used an external one and if so are there any guides on how to set it up to work with a 3rd party system?

If I can use forti to do this, then I can add the captive portal to the wired connections as well as the wifi.

2 REPLIES 2
ndumaj
Staff
Staff

Hi Roksakure,

Yeap the external portal works perfectly fine on FGT, we do have so many implementation also with the Fortiauthenticator.
Doesn't matter what external portal you will use the flow is the same.
Please review the following article:
https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-How-to-configure-FortiGate-Captiv...

-BR-

- Happy to help, hit like and accept the solution -
Debbie_FTNT
Staff
Staff

Hey roksakure,

to clarify a bit:

- even if you enable an external captive portal on FortiGate, it will first redirect to its own captive portal, and then immediately redirect to the external one; FortiGate itself should not prompt for credentials, but the redirect has to happen in this way for FortiGate to pick up the captive portal's response properly and consider the user authenticated

- if you're facing certificate errors, setting a certificate under 'config user setting' or in 'Authentication Settings' under 'User & Authentication' should take care of that; you might also need to define a URL for the captive portal on FortiGate

- if you would like to have a Fortinet device host the captive portal, FortiAuthenticator may be a good idea; it would also allow for self-registration (for guest users for example), and/or you could enforce 2FA authentication (FortiToken/email/SMS) as well

+++ Divide by Cucumber Error. Please Reinstall Universe and Reboot +++
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors