reCaptcha and Restricted Internet Users

[tom.mccomb]

Due to the recent COVID crisis, our users are asked to login to a website prior to coming into work to "validate" that they do not have COVID symptoms or been in contact with anyone who has COVID.

There are some users who are unable to do this prior to coming in and we need to allow them to access the website from their VDI/PCs when they come into the office and pass through my external firewall.  I have been able to load all the elements correctly with the exception of the reCaptcha that appears on the bottom of the page.  

I have added the following to our approved internet filter: api-verify.recaptcha.net, api-verify.recaptcha.net/, www.google.com/recaptcha/*, www.google.com/recaptcha/api.js and even www.google.com/recaptcha/*

I have used Fiddler and Chrome to try and determine what is being blocked but I am running out of ideas.  These users should have limited to no access and if the solution is to just allow of of Google's netblocks I am going to need to then block everything google owns by application-id.

Any thoughts are appreciated.

[BPry]

@tom.mccomb,

Do you have an option of creating a version of the site that works internally without the reCaptcha? The last time I looked into this issue I wasn't able to come up with a good solution that worked consistently.  

[tom.mccomb]

Unfortunately no, this initiative was pushed by the business so we are playing catch up.  I believe the best solution would be to go the old pen and paper route for this part.  The user base that are unable to do this via a smart phone or a home connection is small enough that it will need to do.