07-05-2020 11:24 AM
Hello,
I have configured the Captive portal but i am not able to open the web page.
PAN-OS version- 9.0.9
Below is my configuration:-
1 - LDAP authentication
2 - Configured interface management profile with the check response page.
3 - enabled user identification.
4 - configured authentication policy.
5 - Apply forward proxy decryption.
After some troubleshooting, i am able to telnet my captive portal URL but not able to open the webpage.
Can anyone suggest to me what i need to check?
And SSL decryption is necessary for captive portal?
07-06-2020 11:37 AM
It looks like there's been a few threads on this issue. It seems that safari itself might be getting in the way of the page loading. Maybe try a different browser other than Safari?
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClofCAC
Maybe one of these will help?
07-06-2020 09:09 AM
@Jafar_Hussain can you explain a bit more about the circumstances around when you think CP should be presented when it's not? It has been my experience that yes, for CP to work properly you will need SSL decryption. In your authentication profile what enforcement mechanism do you have selected?
07-06-2020 11:19 AM
Thank you for your reply.
I removed all the CP configuration from the firewall and re-configured the whole thing again. Now it seems to be working except for few issues on Safari browser on iOS devices. We are having SSL certificates issues on iOS devices only. All else is working. The trust forward certificate is not trusted by Safari and chrome so it refuses to load the page. you have any idea regarding this.
07-06-2020 11:37 AM
It looks like there's been a few threads on this issue. It seems that safari itself might be getting in the way of the page loading. Maybe try a different browser other than Safari?
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClofCAC
Maybe one of these will help?
07-07-2020 08:55 AM
Thanks for shared the KB , i will try this.
10-17-2021 02:26 AM
I have also made an article about general issues with the remote access VPN and updated it as I have seen some major issues that come when "Enforce GlobalProtect for Network Access" is used or the captive portal is with ssl self signed cert:
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
