Captive Portal on connecting to SSID rather than via Browser for Apple devices - is it possible?

[kalyanram.piratla]

Hello Everyone,

I was just wondering if it is possible to have captive portal pop up on connecting to a SSID rather than having the captive portal page upon accessing any website for apple devices?  Captive Portal works on accessing any website using safari.

I tried blocking www.apple.com/library/test/success.html as a custom url so that the iPad does not check for internet connection in the background.  It does not seem to work for me.

Am I missing something in terms of configuration or is it not possible for the PA-500?

Many Thanks,

Kalyan

[BobW]

A lot of wireless units can have a redirect on connect to SSID which you should be able to point towards the CP on the PA-500.  But, when the timeout happens on the PA-500, the unit will still be on the wireless, which means they will be blocked until the authenticate again by going to a webpage.

From the info I have gathered, the "success" page by Apple is mean to do exactly what you want:  Hit a page via http and prompt for captive portal if you can't get out.

Does that help?

Bob

[kalyanram.piratla]

Not exactly.  I dont want to open up any browser or access any webpage to be captive portal'd.

What I meant to say was:  I take my iPad, find a SSID Guest and connect to it.  Upon clicking on Guest, I would like to see the captive portal screen.

Either I have completely misunderstood your opinion or my thoughts are way to fancy

Cheers

Kalyan

[mharding]

Do you have a WPA/WPA2 password on your guest network?

[kalyanram.piratla]

Nope.  The guest networks was taken as an example.  I am trying to have this sorted for students who are handed over iPads to connect to the student SSID.  So ideally they would be using their domain accounts.

[scantwell]

Ok, but that is exactly what CP is.... getting user credentials via a web page.

My recommendation could be to take a look at some of the API scripts that PA has written with its vendors, so when a user IS authenticated to a wireless network, those credentials are sent via REST API to the FW.   This functionality is discussed in the PA205 class, and there are scripts written, which would accomplish this.

I do not think it will be a straight copy/paste and it's working, it will require some tweaking on your part.

Let me know if this is what is closer to what you are looking for.