topic Re: Captive portal problem in General Topics

Captive portal problem

Jafar_Hussain — Sun, 05 Jul 2020 18:24:23 GMT

Hello,

I have configured the Captive portal but i am not able to open the web page.

PAN-OS version- 9.0.9

Below is my configuration:-

1 - LDAP authentication

2 - Configured interface management profile with the check response page.

3 - enabled user identification.

4 - configured authentication policy.

5 - Apply forward proxy decryption.

After some troubleshooting, i am able to telnet my captive portal URL but not able to open the webpage.

Can anyone suggest to me what i need to check?

And SSL decryption is necessary for captive portal?

Re: Captive portal problem

Brandon_Wertz — Mon, 06 Jul 2020 16:09:04 GMT

@Jafar_Hussain can you explain a bit more about the circumstances around when you think CP should be presented when it's not? It has been my experience that yes, for CP to work properly you will need SSL decryption. In your authentication profile what enforcement mechanism do you have selected?

Re: Captive portal problem

Jafar_Hussain — Mon, 06 Jul 2020 18:19:19 GMT

@Brandon_Wertz

Thank you for your reply.

I removed all the CP configuration from the firewall and re-configured the whole thing again. Now it seems to be working except for few issues on Safari browser on iOS devices. We are having SSL certificates issues on iOS devices only. All else is working. The trust forward certificate is not trusted by Safari and chrome so it refuses to load the page. you have any idea regarding this.

Re: Captive portal problem

Brandon_Wertz — Mon, 06 Jul 2020 18:37:24 GMT

It looks like there's been a few threads on this issue. It seems that safari itself might be getting in the way of the page loading. Maybe try a different browser other than Safari?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClofCAC

https://live.paloaltonetworks.com/t5/general-topics/guest-access-via-captive-portal-problem-with-page-not-always/td-p/31970

https://live.paloaltonetworks.com/t5/general-topics/captive-web-portal-isn-t-working-as-expected/td-p/133494

https://live.paloaltonetworks.com/t5/general-topics/captive-portal-using-client-certificates-on-ios/td-p/50993

Maybe one of these will help?

Re: Captive portal problem

Jafar_Hussain — Tue, 07 Jul 2020 15:55:15 GMT

@Brandon_Wertz

Thanks for shared the KB , i will try this.

Re: Captive portal problem

nikoolayy1 — Sun, 17 Oct 2021 09:26:28 GMT

I have also made an article about general issues with the remote access VPN and updated it as I have seen some major issues that come when "Enforce GlobalProtect for Network Access" is used or the captive portal is with ssl self signed cert:

https://live.paloaltonetworks.com/t5/general-topics/knowledge-sharing-community-account-fix-and-globalprotect/td-p/441311