What happens if the identity of a user is known?
A.
If the user credentials do not match an Access Role, the system displays the Captive Portal.
B.
If the user credentials do not match an Access Role, the system displays a sandbox.
C.
If the user credentials do not match an Access Role, the traffic is automatically dropped.
D.
If the user credentials match an Access Role, the rule is applied and traffic is accepted or dropped based on
the defined action.
Working with Access Role Objects in the Rule Base
In rules with access roles, add a property in the Action field to redirect traffic to the Captive Portal. When the source identity is unknown and traffic is HTTP, this property redirects the user to the Captive Portal. If the source identity is known, the Action in the rule (Allow or Block) is enforced immediately and the user is not sent to the Captive Portal. After the system gets the credentials from the Captive Portal, it can examine the rule for the next connection.