topic Re: Capture Portal 403 error in General Topics

Capture Portal 403 error

tylerlindberg — Thu, 07 Oct 2021 16:49:20 GMT

Hey Live Community,

I'm working on a project to have two zones on a vwire (one trust, and one lab). In order to get to the lab zone from the trust zone, I've created rules to only allow authenticated users to go through, and I've created my capture portal in accordance to their vwire documentation:

Configuring Captive Portal in V-Wire (with RADIUS Authenticatio... - Knowledge Base - Palo Alto Networks

However, I'm getting a 403 error when trying to manually access the capture portal. I've been looking around trying to troubleshoot this, but I've come up dry. I have a ticket open with PA, but I thought I'd ask here in the mean time.

Thanks!

Re: Capture Portal 403 error

jdelio — Thu, 07 Oct 2021 20:39:57 GMT

And you made sure that you performed:

Configure and Adjust the Security Rules Based on the Particular Scenario

Go to the "Policies tab > Security" rule base
Make sure that captive portal traffic is allowed by security policies; we need to ensure that the users being redirected can reach the L3 interface serving the portal page; http redirection is used with port 80, while https redirection is using ports 6080/6081/6082/6083.
Make certain the DNS traffic is allowed for the users (in order for redirection to work, user must first try to access external web site)
Often, there is no need to create any additional security policies if the intra-zone traffic is enabled. Users from the trust zone will be able to reach the captive portal in the trust zone

Also, were you able to manually test the Captive Portal in step 2?

Re: Capture Portal 403 error

tylerlindberg — Thu, 07 Oct 2021 21:02:14 GMT

The hosts trying to reach it are in the same zone, and I can ping the L3 interface that has the IP for the capture portal.

DNS resolution for the clients is also working.

Manually going to the Capture Portal results in the 403 error displaying on the website for the capture portal itself.

Re: Capture Portal 403 error

tylerlindberg — Tue, 12 Oct 2021 01:45:15 GMT

I re-ran through my configuration with PA support and they're finding my configuration to be sound. I'm still just getting a 403 error for some reason, I can't find any documentation on what would case a 403 error.

Re: Capture Portal 403 error

KLopez2 — Thu, 11 May 2023 15:26:18 GMT

Having this same issue right now with Kerberos SSO on a captive portal. Did you ever get this resolved? If so, what was the fix?