Multiple Firewalls - Central Captive Portal

[eshaq786]

Does anyone know of a way to centrally manage guest access for multiple firewalls at multiple sites? It appears that guest management setup on a firewall is only for that particular site.

If central management is not possible, can someone recommend a free captive portal software that we can run as a virtual machine or even install on a windows server where we can manage guest access i.e. provide credentials.

[Baptiste]

You have to use Fortiauthenticator for central user management

[xsilver_FTNT]

FortiAuthenticator is certainly good solution I would preffer.

Alternatively you can write your own portal and on FortiGate use External Captive Portal option.

[just to complete answer]

[eshaq786]

We do have a Fortiauthenticator but how does guest management work on that?

[Baptiste]

I quickly test FAC (eval licence), as far as I remember there is no "Guest" items

"Guest Users" on FGT equals "local users" on FAC

and "remote users" = fetch from your AD/LDAP/...

But I'm not 100% sure, if someone can confirm (or not !)

[Fishbone_FTNT]

Hey guys,

on FAC there are no explicit "Guest users", but you can create local groups which would serve that purpose, and/or utilize self-registration portal, which will give the visitors possibility to self-register themselves into the network.

You can even try social login feature (since 4.0 I think) which will allow to identify visitors with Facebook or Google accounts (supported is also LinkedIn and one more which I can't recall right now).

But of course your config depends on your needs :) Definitely there is handful of possibilities to handle guest users with FAC.

Cheers,

 Fishbone )(

[eshaq786]

Anyone know of a alternative hotspot captive portal solution?