12-13-2022 10:16 AM - edited 01-24-2023 08:34 AM
Hi all,
I've been working with a number of customers lately who have been trying to gather a list of in-flight wifi domains that they need to allow as GlobalProtect Enforcer exceptions and I thought I'd share them here. I'd also ask that you please post any additional domains or use-cases that are missing and I'll be sure to update my list. Note: I'm US-based, so my list will likely skew to NAM domains initially. Would be great to have some international users comment with their list
GoGo Wireless (Intelsat) - *.gogoinflight.com, gogoinflight.com, *.gogoinair.com, gogoinair.com,
Boingo Wireless - *.wifilauncher.com (unverified)
FlyFi - *.flyfi.com, flyfi.com, *.fly-fi.com, fly-fi.com,
ViaSat - *.viasat.com, viasat.com, *.viasat.io, viasat.io, inflight.viasat.com,
Panasonic In-flight WiFi - inflight.pacwisp.net,
WiFi Onboard - *.inflightinternet.com, inflightinternet.com, wifi.inflightinternet.com, *.wifionboard.com, wifionboard.com,
Inflight-WiFi (TMobile?) - *.inflight-wifi.com, inflight-wifi.com,
US Carriers
Delta - *.deltawifi.com, deltawifi.com, wifi.delta.com,
United Airlines - *.unitedwifi.com, unitedwifi.com, wifi.united.com, unitedprivatescreening.com, *
American Airlines - .aainflight.com, aainflight.com,
Southwest Airlines - *.southwestwifi.com, southwestwifi.com,
Alaskan Airlines - *.alaskawifi.com, alaskawifi.com
EU Carriers
Lufthansa - *.lufthansa-flynet.com, lufthansa-flynet.com,
British Airways - shop.ba.com,
12-13-2022 10:20 AM
Thanks for sharing!
01-13-2023 09:55 AM
According to discussions with Palo Alto. This exclusion list does not work for iOS/Android and has a limitation of 40 entries with a total of 1024 characters on 5.2/6.0/6.1
01-13-2023 10:55 AM
Hi @chmotley ,
Thank you for the excellent thread. AA also uses Boingo on some flights. Not sure if it needs to be whitelisted since you connect to aainflight.com, but it wouldn't hurt to add it.
Thanks,
Tom
01-13-2023 11:45 AM - edited 01-13-2023 11:46 AM
Note: The domains listed below have not been self-tested to confirm if they are the valid airlines wi-fi portal, add/exclude at your own risk. Also adding all of these domains exceeds the 40 entry, 1024 character count, so I would recommend utilizing the Captive Portal Detection Method on Windows/macOS and only add these if there is an issue with that specific airline.
Note: Links below are external to Palo Alto.
We gathered the domain list of Airlines that offer wi-fi from:
https://www.edreams.com/blog/in-flight-wifi/ (I then performed searches for "How+to+connect+to"%Airline%"+"Wi-Fi" in Google (where %Airline% was the name of the airline) to try to find if there was a page that included the exact URL/Domain to connect to for wi-fi for that carrier. See the 3rd column for this list.)
https://www.reddit.com/r/sysadmin/comments/qzvdfa/urls_for_inflight_wifi/
https://thepointsguy.com/guide/how-to-connect-to-wifi-networks/
| Airline | TLD | Wi-Fi Domain "how to connect to <> wifi" | SearchResultURL |
| GoGo In-Air and Various Carriers (Aerlingus) | *.gogoinflight.com | ||
| GoGo In-Air and Various Carriers | gogoinflight.com | ||
| GoGo In-Air and Various Carriers | *.gogoinair.com | wifionboard.com | |
| GoGo In-Air and Various Carriers | gogoinair.com | ||
| GoGo In-Air and Various Carriers | *.wifionboard.com | https://www.gogoair.com/for-passengers/thank-you/ | |
| GoGo In-Air and Various Carriers | wifionboard.com | ||
| Viasat and Various Carriers | *.viasat.com | inflight.viasat.com | |
| Viasat and Various Carriers | viasat.com | ||
| Viasat and Various Carriers | *.viasat.io | ||
| Viasat and Various Carriers | viasat.io | ||
| Viasat and Various Carriers | inflight.viasat.com | ||
| Pacwisp and Various Carriers | inflight.pacwisp.net | ||
| Pacwisp and Various Carriers | *.pacwisp.net | ||
| Various Arilines | flyfi.com | ||
| Various Arilines | *.fly-fi.com | ||
| Various Arilines | fly-fi.com | ||
| Various Arilines | *.inflightinternet.com | ||
| Various Arilines | wifi.inflightinternet.com | ||
| Various Arilines | inflightinternet.com | ||
| AerLingus | *.aerlingus.com | airborne.gogoinflight.com | https://www.aerlingus.com/experience/onboard-features/wifi-in-the-sky/ |
| Aeroflot | *.aeroflot.ru | entertainment.aeroflot.ru | https://www.aeroflot.ru/us-en/information/onboard/wifi |
| AirAsia | *.airasia.com | wifi.airasia.com | https://wifi.airasia.com/faq |
| Air Canada | *.aircanada.com | aircanadawifi.com | https://www.aircanada.com/ca/en/aco/home/fly/onboard/wi-fi.html/#/ |
| Air Canada | rougewifi.com | ||
| Air China | *.airchina.us | ||
| Air China | *.airchina.com | ||
| Air Europa | *.aireuropa.com | www.aireuropa-ontheair.com | |
| Air France | *.airfrance.us | connect.airfrance.com | https://wwws.airfrance.us/information/prepare/divertissements-wifi-presse/wifi-a-bord |
| Air France | *.airfrance.com | connect.airfrance.com | |
| AirTran | *.airfrance.fr | connect.airfrance.com | |
| Alaska Airlines | alaskaWiFi.com | ||
| Alaska Airlines | *.alaskawifi.com | ||
| Alitalia | *.ita-airways.com | www.ita-airways.com | |
| All Nippon Airways | *.airwayswifi.com | www.ana-inflight-wifi.com | |
| American Airlines | *.aainflight.com | ||
| American Airlines | aainflight.com | ||
| ANA | *.ana.co.jp | www.ana-inflight-wifi.com | |
| British Airways | *.ba.com | shop.ba.com | |
| Cebu Pacific Air | *.cebupacificair.com | ||
| China Eastern Airlines | *.ceair.com | www.ce-air.com | On- board WiFi service (ceair.com) |
| China Airlines | www.china-airlines.com | www.cal-wifi.com ; inflight.pacwisp.net (existing) | https://calec.china-airlines.com/FlightWifi/Agreement.aspx?lang=en-us&country=us&locale=en |
| Delta | deltawifi.com | ||
| Delta | *.deltawifi.com | ||
| Delta | wifi.delta.com | ||
| Delta | *.delta.com | ||
| Delta | *'.delta.com | ||
| Egypt Air | *.egyptair.com | www.wifi-pax.egyptair.com | https://www.egyptair.com/en/fly/entertainments/Pages/default.aspx |
| Emirates | *.emirates.com | portal.inflight.onair.aero | https://www.google.com/search?q=How+to+connect+to+Emirates+Wi-Fi#fpstate=ive&vld=cid:f3f55a26,vid:Si... |
| Etihad | *.etihad.com | etihadwi-fly.com | https://theairwaysguide.com/airline/etihad-wifi-guide/ |
| EVA Air | *.evaair.com | www.evawifi.com | https://www.evaair.com/en-global/fly-prepare/flying-with-eva/inflight-entertainment-service/connecti... |
| Finnair | *.finnair.com | Finnair.com | https://www.finnair.com/us-en/frequently-asked-questions/entertainment-and-internet-on-board/is-ther... |
| Garuda Indonesia | *.garuda-indonesia.com | https://www.garuda-indonesia.com/au/en/garuda-indonesia-experience/in-flight/connectivity/index | |
| GOL Linhas Aereas Inteligentes | *.voegol.com.br | inflightinternet.com | https://www.voegol.com.br/en-us/gol-services/gol-online |
| Gulf Air | *.gulfair.com | ||
| Cathay Pacific | *.cathaypacific.com | wifi.cathaypacific.com | https://www.cathaypacific.com/cx/en_US/flying-with-us/using-electronic-devices/connectivity.html#:~:... |
| HongKong Airlines | *.hongkongairlines.com | ||
| Iberia | *.iberia.com | shop.iberia.com | https://www.iberia.com/us/on-board/wifi/#:~:text=Set%20your%20personal%20device%20to,%3A%20shop.iber... |
| Icelandair | *.icelandair.com | https://www.icelandair.com/support/on-board/wi-fi/ | |
| Icelandair | *.icelandairwifi.com | wifi.icelandairwifi.com | |
| Icelandair | icelandair.viasat.com | ||
| JetBlue | *.flyfi.com | ||
| JAL | *.jal-wifi.com | https://www.jal.co.jp/jp/en/inter/service/wifi/qa/#:~:text=How%20do%20I%20connect%20to%20Inflight%20... | |
| *.jal.co.jp | |||
| Lufthansa | *.lufthansa.com | ||
| Lufthansa | *.lufthansa-flynet.com | ||
| Lufthansa | lufthansa-flynet.com | ||
| Lufthansa | *.inflight-wifi.com | ||
| Lufthansa | inflight-wifi.com | ||
| Libyan Airlines | *.ibyanwings.aero | http://www.libyahavayollari.com.tr/ | |
| Malindoair | *.malindoair.com | https://www.malindoair.com/Wifi-Guide | |
| Mango Airlines | *.flymango.com | ||
| Nok Air | *.nokair.com | ||
| Norwegian | *.norwegian.com | norwegianwifi.com | https://www.norwegian.com/us/travel-info/on-board/wifi/ |
| Oman Air | *.omanair.com | ||
| Philippine Airlines (PAL) | *.philippineairlines.com | portal.inflight.onair.aero | https://www.google.com/search?q=How+to+connect+to+Philippine%20Airlines%20(PAL)+Wi-Fi#kpvalbx=_ZkmvY... |
| Qatar Airways | *.qatarairways.com | oryxcomms.com | https://theairwaysguide.com/airline/qatar-wifi-guide/ |
| Ryanair | *.ryanair.com | ||
| SAS (Scandinavian Airlines) | *.flysas.com | www.sas.se | https://www.flysas.com/us-en/help-and-contact/faq/wifi/how-do-i-get-help-if-i-cant-log-in/#:~:text=C... |
| Saudi Arabian Airlines | *.saudia.com | ||
| Singapore Airlines | *.singaporeair.com | www.singaporeair-krisworld.com | https://www.singaporeair.com/en_UK/us/flying-withus/entertainment/inflight-connectivity/ |
| *.Singaporair.com | |||
| Southwest Airlines | *.SouthwestWi-Fi.com | https://medium.com/@mariaparrish28/how-to-connect-to-airlinewi-fi-4fbbfa4d4ada | |
| Southwest Airlines | southwestwifi.com | ||
| Southwest Airlines | *.southwestwifi.com | ||
| TAM | *.latamairlines.com | ||
| TAM Tap Air Portugal | *.flytap.com | onboardwifi.flytap.com | https://www.flytap.com/en-us/on-board/connectivity |
| Thai Airways | *.thaiairways.com | inflight.onair.aero | https://www.thaiairways.com/de_DE/i_fly_thai/an_bord/wifi_an_board.page |
| Thai Airways | inflight.onair.aero | portal.inflight.onair.aero | |
| Thai Airways | thaiskyconnect.aero | ||
| Turkish Airways | *.turkishairlines.com | ||
| US Airways | |||
| United Airlines | *.unitedwifi.com | ||
| United Airlines | unitedwifi.com | ||
| United Airlines | wifi.united.com | ||
| United Airlines | *.united.com | ||
| United Airlines | *.unitedprivatescreening.com | ||
| Vietnam Airlines | |||
| Virgin Atlantic | *.virginatlantic.com | virgin-atlantic-wifi.com | https://flywith.virginatlantic.com/eu/en/inflight-entertainment/wifi-and-power.html#:~:text=Enable%2... |
| Vueling | *.vueling.com | shop.vueling.com | https://theairwaysguide.com/airline/vueling-airlines-wifi-guide/ |
| Westjet | *.westjet.com | www.westjetconnect.com |
07-31-2023 08:24 AM
We recently started having users bring up this issue on flights. I am hoping by adding the few we are having issues with that it will allow a better experience but still block company resources unless the gateway gets connected. I tested on a flight last week and eventually got connected to a gateway but we still have users with issues so thinking about added a few of these.
11-14-2023 07:44 AM
@ErinWest Please feel free to post the list of resources you've added here so we can update the list!
08-02-2024 09:45 AM
We are having issues again with United flights although we added quite a few of them to our profile. Researching again to see what they are using.
11-05-2024 09:21 AM
Hey,
Im curious to understand the version you are running, 6.2.5 is allegedly supposed to address captive portal issues. We recently deployed that version and are in monitoring mode.
11-05-2024 10:36 AM
See update from: 01-13-2023
"Note: The domains listed below have not been self-tested to confirm if they are the valid airlines wi-fi portal, add/exclude at your own risk. Also adding all of these domains exceeds the 40 entry, 1024 character count, so I would recommend utilizing the Captive Portal Detection Method on Windows/macOS and only add these if there is an issue with that specific airline. "
We use the Captive Portal Detection on Windows and macOS, this works fine for the majority of Airlines and other locations, we do still have some exceptions that have been put in place, because the Captive Portal Detection didn't work for those sites, in the version that we had at that time, However it's a difficult one to test to remove an entry after it's been added, but we only have a handful of captive portal networks in ours (e.g. we are maxed out at 40) including sites that include EMM and A/V URL's to ensure those can always connect without the VPN being established.
My list is also being used for our "Safari Exclusions" for the Safari Browser on iOS (not related specifically to GlobalProtect), as GlobalProtect on iOS does not do CaptivePortal Detection as of version 6.1.5, We have had to tell Safari not to tunnel VPN to specific locations where our policy says:
VPN Tunnel *.com, no VPN Tunnel on wifi.united.com.
We constantly battle iOS Captive Portal Issues, whereas the Windows and macOS clients have been pretty good with just the "Captive Portal Detection" enabled.
11-06-2024 07:40 AM
I ended up having to add additional url's for my issue with United flights. However we are also working on testing 6.2.5 for other reasons-we had issues with hiberation to connection issues or when people moved from wireless to wired or home to office, etc.
11-06-2024 08:15 AM
@ErinWest - Would you be able to share what you have for United, We have also had issues, although all the IT people that have gone to test after it being reported have come back and not had any issues. These are the 3 domains I have as excusions in GlobalProtect for Windows/MAC and Safari Exclusions for iOS:
| *.unitedwifi.com |
| unitedwifi.com |
| wifi.united.com |
Also planning to go to 6.2.5 here soon.
11-11-2024 01:21 PM
I ended up having to added the following additional ones after research on United's site-they use a variety depending on the aircraft
*.gogoinflight.com
gogoinflight.com
*.gogoinair.com
gogoinair.com
wifionboard.com
*.wifionboard.com
*.viasat.com
viasat.com
inflight.viasat.com
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
