italk(IT)

When you have many user on your organization. local user management on pfsense may not easy to manage user. Free radius is user management that better than local user management. It can limit bandwidth per user apply on captive portal, static IP for user, etc.

Captive portal feature is authentication portal before client access to the internet. It check authorization of user to access the internet. You can authentication on captive portal with AD user but first, you must connect fortigate firewall with AD.

Captive portal feature is authentication portal before client access to the internet. It check authorization of user to access the internet. You can authentication on captive portal with AD user but first, you must connect fortigate firewall with AD.

If policy of your organization is not allow user to using internet fortigate firewall can support your organization policy. you config that on policy firewall and apply schedule object to policy that allow client access to the internet.

When you create user or group user you can apply user or group user on policy firewall. Example 1. Users on IT department access to all server on DMZ zone but users on accounting department should be access specific server that relate with accounting department. you can create 2 policy for IT users and accounting users by using local user and group user Example 2. Users and group user can use on captive portal