Panorama Portal Login

[Violette Taps]

Were trying to find a way to redirect people trying to hit our Globalprotect login page on straight http to redirect to https seemlessly. We thought we had this working with an inbound NAT policy with destination translation looking for original service as TCP 80 and the translation moved it to TCP 443. This doesn't actually seem to be working and I believe what we thought as our initial success may have just been Chrome being helpful.

I'm not seeing traffic logs for connection attempts from my device to the portal IP unless it's a successful connection on 443 (i.e. I'm not seeing any of the port 80 attempts). Is this due to an internal traffic flow difference since it is a Globalprotect portal?

This is really just about ease of use for our end-users since getting them to use when first going to the page is only easy when providing them a link in a webpage. Telling someone verbally almost always ends up with them attempting to just type in the url without

if #1 is too much of an investment, maybe it's possible to redirect to an external hosted cloud server like from digital ocean which would run you $5/mo. or leveraging a device like an F5 would make this possible.

Now, if you look at the sessions (show session all filter source x.x.x.x destination y.y.y.y destination-port 443), you'd find that it does a destination NAT to some port (urs could also be 20077). I tried doing a D-NAT from 80 to 20077 but that didn't work.

@bradk14 the destination NAT idea came from something we saw on a Live article but I can't seem to find it anymore. It was a long shot but we thought we had it working... pretty sure Chrome just remembered we'd previously reached the portal on https and just updated hte URL every time we typed it in.

I thought about using a server as you suggest to just have a redirect page set up, however, I wasn't sure how that would work since the portal isn't just a webpage... it's also a connection point for the VPN client.

@ansharma I noticed the 20077 translations as well when examining the sessions in the Traffic Monitor. I agree that it seems like something specific is being done for VPN behind the scenes that occurs before a lot of the user configurable stuff or like a script blocking anything but https connectivity like you mentioned.

I'm definitely going to reach out to our reps about this. It seems like a bit of an oversight and, while it isn't a super important feature, it certainly is useful when presenting the portal to end-users.

The PowerSchool Parent Portal allows parents, guardians, and other appropriate individuals to view information contained in the ACPS PowerSchool student information system (SIS). Some of the types of information available through this portal are: school announcements, attendance, grades (current and historical), and schedules. The portal will also be used by parents and students to manage course requests for middle and high school.

ACPS recommends that you use one of the following browsers Internet Explorer (version 8 or later), Firefox (version 3.6 or later), or Safari (version 4 or later). Other browsers may work, but are not officially supported.

Access Keys are unique for each student. If you have more than one student you will receive a separate Access Key for each student. You can create your account with one Access Key and add other students at a later date when you receive additional Access Keys.

When you navigate to the portal login page for the first time, you will need to create a portal account. You will be selecting a username and password that you will use to access the portal, so decide on this information ahead of time. You will want to choose a username and a password that you will remember.

Once you have created your account and are on the portal login page, you will enter the username and password that you created when you set up your account to access the portal. The password is case-sensitive, so be sure to enter it exactly as you entered it when you set up your account. Once you have successfully logged in you will arrive at the default portal page, which for most schools will be the school bulletin

Be sure to sign out using the link in the top right corner when you are done. Signing out and closing your browser will prevent others from gaining access to your portal account. This is especially important if you are using a computer in a public space.

All navigation in the portal will begin with the icons on the left side of the screen, or the list of students across the top of the screen. You can use the Help link in the top right corner to access online help resources.

The links listed under Navigation on the left-hand side of the screen will help you access different information about your student. Click on a link to change to that screen. The active screen is highlighted in blue.

If you have more than one student associated with your account you can change students by selecting a name at the top of the screen. See Managing Student Links for more information about adding additional students. The currently selected student is highlighted in blue. You may have different navigation options or available information with students who are at different schools.

Information about grades, assignments, attendance, and school announcements can be automatically emailed to you on a regular schedule. The preferences for this are managed on the Email Notification screen. Select the types of information you want emailed to you, and the frequency of the emails and click Submit. By default, the notifications are sent to the address that you entered when you created your portal account. You can enter additional email addresses to receive the notifications

You can change your password, email address, or other portal account information on the Account Preferences screen. Modify any information by entering new information and clicking the Save button. Modify your username of password by clicking on the hyperlink or pencil icon next to the appropriate field. Click the save button to record your changes.

You can get a list of students currently associated to your account by clicking on the Students tab on the Account Preferences screen. Clicking on the Add+ button will bring up a screen that will allow you to enter the Access key information for additional students. Be sure to click Submit when you are finished entering the information. Each student has unique Access Keys, so you will need the Access key information for each student you wish to add.

3a8082e126