Firewall Authentication
Authenticate users with local and remote servers, understand active vs passive methods, build user groups, enforce authentication in policies, and monitor sessions.
FortiGate distinguishes active and passive authentication. Active means the user is explicitly prompted — typically a captive portal that intercepts HTTP(S) and asks for credentials. Passive means identity is learned transparently in the background, chiefly through FSSO (directory logon events) or certificate-based methods, so the user is never prompted.
Authentication can be enforced for firewall traffic, administrative login, SSL/IPsec VPN, and the explicit web proxy. For firewall traffic, the user is challenged the first time they generate traffic that matches an authenticating policy.
Which is an example of ACTIVE authentication?