topic Re: Captive Portal Turned on but redirect Pages don't respond in General Topics

Captive Portal Turned on but redirect Pages don't respond

MP2021 — Fri, 27 Aug 2021 11:09:40 GMT

I turned on Captive Portal a couple days ago on a test rule restricting access between two servers before i turn it on for production.

The rule restricts access to the end server as expected and navigating to http for the target server results in the following URL Redirect: https://172.20.20.9:6082/php/uid.php?vsys=1&rule=0&url=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

The Webform is configured for one of the IP's used by the Firewall, but the Port 6082 required for Captive Portal SSL appears to not be listening.

I followed and have checked multiple times the steps in the following guides:

Is there anything else i can check that may shed some light on why this isn't working?

Re: Captive Portal Turned on but redirect Pages don't respond

BPry — Sat, 28 Aug 2021 03:31:48 GMT

@MP2021,

Do you decrypt HTTPS traffic that should be matching your captive portal rule for your test?

If not, the firewall denies the traffic but doesn't actually serve up the captive portal. This is to prevent you servicing something that is simply going to cause a certificate warning in the users browser. You don't want to be telling people that running into cert warnings is "normal" and that they should "bypass" it because then they'll do it for everything and those warnings become meaningless, which is a poor thing to teach your user base.

Re: Captive Portal Turned on but redirect Pages don't respond

MP2021 — Tue, 31 Aug 2021 09:57:28 GMT

@BPry

Thank you, It looks like we don't currently decrypt HTTPS Traffic, i will take a look into turning it on and see if it resolves the issue experienced.

Re: Captive Portal Turned on but redirect Pages don't respond

SBarton12 — Wed, 28 Feb 2024 23:46:52 GMT

I am experiencing a similar issue. While I agree i do not want to make forward untrust behavior normal, I do need a clear mechanism to test the functionality before moving into production. This also occurs when the self signed CA cert of the device is in the endpoint trust store.