This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Captive portal is not working in few sites like google. Showing Sophos isn't configured correctly

Dear All,

I have configured captive portal and checked it was working fine and portal page was opening. But few site like "google" when I was trying to open it was not redirecting to captive portal page and showing a message after advance "Sophos isn't configured correctly. Uninstalling "Sophos" usually fixes the problem. Applications that can cause this error include antivirus, firewall, and web-filtering or proxy software"

How to fix it. Please Help.

Regards,

Shashi Bhushan Sagar

This thread was automatically locked due to age.

0 Aditya Patel over 6 years ago

Hello Shashi,

On the firewall rule, were you able to apply the check to block QUIC protocal?
Cancel
Vote Up 0 Vote Down

Cancel
0 Shashi Bhushan Sagar over 6 years ago in reply to Aditya Patel

Hello Aditya,

Right now it is unchecked. But I have already tested in both condition the same result I am getting.

Regards,

Shashi
Cancel
Vote Up 0 Vote Down

Cancel
0 Aditya Patel over 6 years ago in reply to Shashi Bhushan Sagar

Hello Shashi Bhushan Sagar,

Are you using SATC? If so you may need to refer this KBA.
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael Dunn over 6 years ago

If you enable Captive Portal, and a user visits an HTTPS site, the XG needs to redirect the user from that website to the Captive Portal.

Therefore it needs to do man-in-the-middle, impersonate the HTTPS website, and perform a redirect.

When it does that, it uses its own Certificate Authority. Which your client doesn't like. Your client is correctly warning you that someone is impersonating google.

The solution is to install the XG's Certificate Authority as a Trusted Root Authority on all your computers. This can be done with a AD push or other deployment solutions.

See here for more:

https://community.sophos.com/kb/en-us/132997
Cancel
Vote Up 0 Vote Down

Cancel