Upgraded FAC from 6.6.2 To 6.6.4 as we need the "Endorsor" option so Guests can type in an email for WIFI approval. everything worked fine before with manual approval. After the upgrade the new feature does not work, but that is not the issue.
Now, No Guests can login to the WIFI, they see the portal and register, and I get the approval email and can approve, they show up in the correct group as before, but the credentials dont work. I get the following in the logs:
"Local user authentication from (null) with no token failed: NAS not allowed for authentication"
Type IdNameSub CategoryCategoryDescription
20350 |
Authentication Failed NAS Not Allowed |
Authentication |
Event |
Authentication failed, NAS is not allowed for authentication |
ype IdNameSub CategoryCategoryDescription
20114 |
Authentication Failed without Followup Login |
Authentication |
Event |
Authentication failed, no successful follow up login. |
The first error indicates the NAS is no longer allowed? none of that has changed? I don't know what no successful follow up means? everything was fine in 6.6.2 :(
seems, the FQDN needs to be added as a NAS now?
We are have Same issues.
Did you find the fix?
have a look at https://www.reddit.com/r/fortinet/comments/1eyg3s3/captive_portal_facfgt/
I think so! the request was now coming from the FQDN of the Fortigate firewall auth portal FQDN, I added that as a client on the FAC and it started working, Not very clear at all, but thats what I did,
User | Count |
---|---|
2403 | |
1290 | |
778 | |
528 | |
454 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.