Table of Contents
< All Topics
Print

[IAG] Even if authentication is not allowed, intranet PCs can still go online without authentication

Problem Description

An authentication policy that does not allow authentication is configured for intranet users, but users matching this authentication policy can still go online without authentication.

Process——

  1. Check the device version and find that it is version 12.0.25. Check the configuration of the authentication policy and find that in [Authentication Policy] – [Authentication Method], [Allow authentication-free within this range] is checked.

    900985e60b8d4a9d42.png (46.14 KB)
  2. After unchecking the option, I tested again and found that the user could not log in without authentication.

solution

After IAG12.0.25 version, the function [Allow free authentication within this policy range] is added to the "Not Allow Authentication" function. If free authentication is not allowed, just uncheck it.

Original Link

https://support.sangfor.com.cn/cases/list?product_id=22&type=1&category_id=7299&isOpen=true