topic Re: Captive portal for https traffic without SSL decryption in General Topics

Captive portal for https traffic without SSL decryption

Carracido — Wed, 16 Dec 2020 15:26:34 GMT

Dear community,

I´m currently facing this challengue:

Do you know whether it´s possible to have captive portal working for https traffic without using SSL decryption?

This requirement is not clear in the admin guide but I understand it is according the the article below:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClevCAC

Due to some internal policies deploying SSL decryption wouldn´t be feasible so I´d really appreciate your answers on this topic.

Thank you!

Re: Captive portal for https traffic without SSL decryption

BPry — Wed, 16 Dec 2020 18:02:07 GMT

@Carracido,

You need to decrypt the traffic to effectively redirect to the captive portal correctly. If office politics aren't allowing you to setup decryption, you could potentially just setup a decryption rule for unknown users. This would allow the captive portal to be fed to the user correctly when visiting HTTPS sites while still NOT decrypting traffic as long as the user is identified. That might be an acceptable compromise to get things working correctly and still meet requirements to not decrypt traffic?