Technical Tip: Users are not matching the firewall policy that has active authentication

[hhasny]

Description	This article discusses the scenario when users do not match the firewall policy that has active authentication.
Scope	Active authentication means that users are prompted to manually enter their credentials before being granted access. When there are mixing policies with non-active authentication policies, users would meet these non-authentication policy instead which is expected. Firewall Policy with Non Active Auth
Solution	It is necessary to enable authentication on all policies for it to match the correct policy: Firewall Policy with All Active Auth Alternatively, consider using passive authentication i.e FSSO.