What happens when a user first connects to a network in a WebAuth scenario?
- Their first HTTP or HTTPS request is redirected to a guest authentication portal.
- They are only allowed to access internet web pages.
- They are only allowed to access internal web pages.
- They are denied access until they authenticate via 802.1X.
Explanation: When a user first connects to a network using Web Authentication (WebAuth), they are initially granted limited access through an initial authorization assignment. This stage is designed to restrict almost all traffic except for that required for the authentication process itself.
When the user attempts to browse to any HTTP or HTTPS DNS-resolvable website, the Network Access Device (NAD) intercepts that specific request. Instead of reaching the intended destination, the user is automatically redirected to a Guest User Login portal or authentication web page. Once the user successfully provides credentials and authenticates through this portal, they are assigned a new authorization profile that permits appropriate access to enterprise resources.
This method is often used as a method of last resort for guests or users who do not have a functional 802.1X supplicant or lack an account in the primary identity store.
Related exam: Modules 14 – 16: Checkpoint Exam: Network Security Answers (CCNP ENCOR v9)
