URL Continue and Affect on Applications

[Brandon_Wertz]

Does anyone have any information on the functionality of an application say facebook or netflix on a phone (Android/IOS) where the traffic also goes through a URL policy that has those websites in a "Continue" function?

Currently the Netflix application just "spins" on an IOS device I've tested so far.

[BPry]

This issue was present when we had a "Continue" URL Policy included on our Guest wireless network and the same thing was happening, since it was running through an application and not a browser it never got to the URL Filtering Continue page. Eventually we just switched the URL Policy as we weren't actively trying to monitor anything across the Guest network anyways and we only really wanted it to be desplayed to our internal users. 

[Brandon_Wertz]

This is the same issue I'm running into as well.  My company doesn't necessarily want to block these apps on "guest" networks, but provide the splash screen and allow them to continue if "required."

So it's been your experience it didn't work either?

[OtakarKlier]

Would an intiial captive protal be useful in this case? Just have the guests open a browser and see the companies terns and conditions, once they click I agree, no more continue pages?

Just a thought.

[Brandon_Wertz]

It's a good thought but we already have a Guest regristration process, and honestly I'm not certain how captive portal would play into the "continue" function.

I ended up opening a ticket and found the issue.  It makes sense, but I didn't realize SSL interception was necessary for the "continue" function.

For our non-corporate networks, BYOD, we obvious can't intercept that traffic.  Since the sites I was trying to force through continue were SSL I was getting SSL protocol errors in the web browser.

I guess there are some other settings that were required which I already had configured except one.  Via CLI I needed:

ssl-decrypt url-proxy yes

This allows any website to be processed for interception (only for  which allows the continue function to work.  The one caveate to this is BYOD get the MITM cert error because we're using an internally signed cert for interception and they don't have our root cert on their device.  However in our case that's fine, because we'd rather make them click to continue.

--EDIT--

"continue" breaks applications.  So for instance you want to continue Facebook, well doing so breaks the application on a smartphone.  So just an FYI for someone trying to do so on BYOD.