topic Re: Captive Portal HTTP only landing page? in General Topics

Captive Portal HTTP only landing page?

natwong — Fri, 13 May 2022 11:53:31 GMT

Hi,

I have set up the CP successfully.

I see the CP is running on PA redirect IP:6082 with HTTPS.

Is there any way that we can use HTTP only on the CP landing page?

like http://PA_redirect_IP:6082

not https://PA_redirect_IP:6082

We are not using credentials for CP login, our CP just accept and go.

No SSL encryption and protection needed.

So, does PA still support HTTP only captive portal page?

Re: Captive Portal HTTP only landing page?

OtakarKlier — Fri, 13 May 2022 21:02:44 GMT

Hello,

Just curious as to why? What is the issue with redirection to https?

One thing to remember is that the Palo Alto is a security appliance and tries to do its best to stay that way, hence the https traffic.

Regards,

Re: Captive Portal HTTP only landing page?

natwong — Sat, 14 May 2022 09:12:46 GMT

Hi,

Originally, my client was using fortigate. It was using HTTP only for captive portal.

They just want to keep same behaviour after PA replacement. Maybe afraid of the "self-signed cert" error page prompt in some mobile devices (They didn't import and use commercial trusted root cert)?

You know, security guy's comment not always comfort our client. 😄