Naomi Posted 2023-May-29 14:45
  
To access the Sangfor NGAF administration interface, launch a web browser and input the IP address or hostname of your NGAF device.
MISMIS Lv3Posted 2023-May-29 14:49
  
see the internet access policy: Examine the current firewall policies to see which one is in charge of permitting internet access. This policy may include provisions for access to popular websites such as YouTube and Facebook.
Adonis001 Lv3Posted 2023-May-29 14:52
  
Specify the AD authentication requirement: Configure the authentication method to utilize Active Directory inside the policy settings. This guarantees that before being allowed internet access, users must verify against AD.
BitCloud Lv3Posted 2023-May-29 14:56
  
Access the Sangfor NGAF management interface: Open a web browser and enter the IP address or hostname of your NGAF device to access the management interface.
Natsu Dragneel Lv3Posted 2023-May-29 14:59
  
In the NGAF management interface, look for the Firewall Policy section or something similar. This is where you may configure internet access rules.
VanFlyheights Lv3Posted 2023-May-29 15:02
  
Your IdP SSO profile settings may be usable only if you use them to configure the SSO profile for your organization.
Garfield Lv1Posted 2023-May-29 15:26
  

To prevent the internet access of the 3 test users who bypassed authentication, you can create access control rules on Sangfor NGAF to block their IP addresses from accessing specific websites or the internet entirely.
Farina Ahmed Lv5Posted 2023-May-29 15:38
  
1) Review policy configuration to ensure SSO traffic is not inadvertently blocked.
2) Whitelist SSO traffic by creating exceptions or allowing necessary ports/protocols/URLs.
3) Check network connectivity between user devices and SSO server.
4) Verify proper Active Directory integration and SSO authentication settings.
5) Monitor NGAF logs for blocked SSO traffic or authentication failures.
6) Review SSO configuration and consult documentation or vendor for guidance.
7) Contact Sangfor technical support for further assistance if the issue persists.
jetjetd Lv5Posted 2023-May-30 00:20
  
Just input the IP address or hostname of your NGAF device.
Bebe_Bote Lv3Posted 2023-May-30 00:28
  
Specify the users that needs authentication and once authenticated can connect to the internet.

I Can Help:

Change

Moderator on This Board

11
8
5

Started Topics

Followers

Follow

1
3
5

Started Topics

Followers

Follow

0
4
5

Started Topics

Followers

Follow

67
20
3

Started Topics

Followers

Follow

3
14
3

Started Topics

Followers

Follow

1
138
3

Started Topics

Followers

Follow

Board Leaders