topic Captive Portal for HTTPS traffic in General Topics

Captive Portal for HTTPS traffic

nagarjuna.b — Thu, 07 Feb 2019 04:52:24 GMT

Hi there,

Is it possible to enforece browser challange for Cpative Portal for HTTPS traffic with out SSL inspection on the firewall?

Regards,

Nagarjuna

Re: Captive Portal for HTTPS traffic

OtakarKlier — Fri, 08 Feb 2019 16:03:44 GMT

Hello,

The captive portal is really only used for user-id mappings. What are you attempting to accomplish by this?

https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-admin/user-id/map-ip-addresses-to-users/map-ip-addresses-to-usernames-using-captive-portal/configure-captive-portal

Regards,

Re: Captive Portal for HTTPS traffic

LukeBullimore — Mon, 11 Feb 2019 17:25:03 GMT

Hey @nagarjuna.b,

The only other alternative to SSL decryption would be the URL proxy feature. But this still requires a CA certificate marked as forward trust which the clients have to trust. Past that you're literally trying to break what SSL was designed for 😉

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFKCA0

Cheers,

Luke.