Connect Before Logon + Enforce GlobalProtect for Network Access + Captive portal

[Stefano-iQera]

Hi all,

we are enforcing to our devices an always on company connection, without vpn our users cannot login to their windows desktop (no local password cache), so we have implemented "Connect Before Logon" + "Enforce GlobalProtect for Network Access" but we have problems with captive portals.

Is the captive portal detection working also in the pre-logon environment?

Thanks.

[reaper]

this should work, but you may need to set the 'Captive Portal Exception Timeout' much higher in order for the user to be able to log on and actually authenticate against the captive portal

[Stefano-iQera]

Thanks for the answer but unfortunately no, it directly gives the error "Portal unreachable".