Captive Portal can't redirect HSTS Session

[Rama_Cahya]

Hi All,

i want to ask you about HSTS Session,

i just installed Captive Portal with Transparent mode because Palo Alto run in Virtual Wire mode, but Captive Portal can't intercept https session.

based on article : Captive Portal Not Working with HTTPS Sessions i trying to decrypt the session. and the problem is when the session intercept web  with HSTS session,  the web shows the image as below and can't be intercepted to captive portal.

is there a solution for HSTS session can be intercept via captive portal?

im sorry for my bad english:)

Thanks,
RC

[BPry]

@Rama_Cahya,

It looks as though you haven't imported the certificate that you are using for decryption into the firefox trusted certificate store. When you setup SSL Decryption you need to import whatever cert you are using to perform the decryption so that the end-device actually trusts the certificate that the firewall generates.