Identifi: What is an easiest way to authenticate users in Active Directory using NAC?

[Ilya_Semenov]

Hello, everybody,

at the moment I have 120 APs and about 12000 users. Employees's SSID has beautiful authorization webform on Fortigate firewall, users use their Active DIrectory credentials and everything works fine, except I can't see AD accounts of wifi users in Netsight. This makes me very sad(

But I have an installation of mighty NAC!

Is there any step-by-step guide how to configure NAC to authorize AD users using a webform?

Could you please share it!

Many thanks in advance,

Ilya

[Ronald_Dvorak]

Could you explain a bit more about the deployment.
What is the security on the WLAN service - is it open/none or WPA PSK or ECP?

[Ilya_Semenov]

Hi, Ronald,

sure!

This is open SSID without authorization. When user connects to the SSID he tries to reach any of Internet resources and gets to Fortigate FG-600 where he asked for his AD credentials (on the beautiful HTTPS login web page).

That is it!

[Ronald_Dvorak]

You'd use the AD and ExtremeControl could query the user accounts via LDAP.

Could you post a screenshot of the current web login page that is used - I'd like to see how beautiful it is 🙂

[Ilya_Semenov]

It's in Russian, Ron, are you sure?) I'll ask the customer for permission on Monday.

It would be great if someone post a link to a guide which will help me to configure web login page in NAC)

[Diederik_Kuijpe]

Why not use RADIUS auth?