topic Captive Portal web form displaying basic auth in chrome in General Topics

Captive Portal web form displaying basic auth in chrome

Lcroce — Fri, 27 Jul 2018 20:06:36 GMT

When I set up the Captive Portal and configure it for browser challenge, on non domain joined machines I get the following prompt before I'm sent to the web-form. Is there any way I can get rid of this or at least get it encrypted so users aren't attempting to send credentials in clear text over the wire?

Re: Captive Portal web form displaying basic auth in chrome

Remo — Fri, 27 Jul 2018 20:52:53 GMT

Hi @Lcroce

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/user-id/map-ip-addresses-to-users/map-ip-addresses-to-usernames-using-captive-portal/configure-captive-portal --> step 3 explains the steps where you configure a TLS profile including a certificate for the captive portal to enable it on https. I think you have to configure only the webform in the captive portal profile for not showing this http basic auth to the non domainjoined clients.

Re: Captive Portal web form displaying basic auth in chrome

Lcroce — Fri, 27 Jul 2018 20:56:15 GMT

I've got a TLS profile already configured. After I cancel the above basic auth prompt, I get sent to the following page which is encrypted. This is the part I don't get. What's causing the first unencrypted prompt?