italk(IT)

 Idel timeout is time that client no activity on network traffic. when client no activity during value of idel timeout then client will logoff from system. If default value of  idel timeout is not enough you can change idel timeout value by your self.

Captive portal feature is authentication portal before client access to the internet. It check authorization of user to access the internet. You can authentication on captive portal with AD user but first, you must connect fortigate firewall with AD.

When you create devices or group device you can apply it on policy or captive portal. 2 ways to add device on fortigate firewall as detail below; 1. Scan device on your network by using "network device scan" feature on fortigate firewall interface after on feature you ill have device list on your network and you can add new device item now 2. Add MAC address into device item.

Captive portal feature is authentication portal before client access to the internet. It check authorization of user to access the internet. You can authentication on captive portal with AD user but first, you must connect fortigate firewall with AD.

When you create user or group user you can apply user or group user on policy firewall. Example 1. Users on IT department access to all server on DMZ zone but users on accounting department should be access specific server that relate with accounting department. you can create 2 policy for IT users and accounting users by using local user and group user Example 2. Users and group user can use on captive portal

Bandwidth internet from ISP are limited. If you have many client and you are not control bandwidth. Finally, total bandwidth are insufficient. Recommendation, you should enable captive portal for filter client to use your internet and limit bandwidth per user by captive portal.  Limitation bandwidth on captive portal do not exempt by user it apply to all user. Step As Video   

Sometimes Captive Portal would not show automatic when client access to the internet In my case I found problem about DNS on client. If client have external DNS such as 8.8.8.8, 8.8.4.4 client may attempt to resolve domain from external DNS but client cannot access to the internet affect to captive portal would not show automatic You can solve this problem by use internal DNS or use LAN IP of pfsense   Step As Video

Redirect website feature can bundle with captive portal feature. You can specific website that user must redirect after authen on captive portal such as Intranet website, search engine website , webmail and company website. Redirect website feature can help comfortable more for user to access frequency website automatically Step as Video

When client need to access the internet. First step you enable captive portal feature.Client must be authentication on captive portal and check authorization for  access into the internet You can use feature of captive portal for control user such as Upload/Download bandwidth. Bypass device from captive portal(use MAC address). Create voucher. Redirect URL after authentication. Do not login duplicate.  You can use captive portal on hotspot solution or control internet usage on your organization. Step as Video