Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 28 subscribers
  • Views 5339 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Captive portal is not working in few sites like google. Showing Sophos isn't configured correctly

Shashi Bhushan Sagar

Dear All,

I have configured captive portal and checked it was working fine and portal page was opening. But few site like "google" when I was trying to open it was not redirecting to captive portal page and showing a message after advance "Sophos isn't configured correctly. Uninstalling "Sophos" usually fixes the problem. Applications that can cause this error include antivirus, firewall, and web-filtering or proxy software"

How to fix it. Please Help.

Regards,

Shashi Bhushan Sagar

 



This thread was automatically locked due to age.
Parents
  • 0

    If you enable Captive Portal, and a user visits an HTTPS site, the XG needs to redirect the user from that website to the Captive Portal.

    Therefore it needs to do man-in-the-middle, impersonate the HTTPS website, and perform a redirect.

    When it does that, it uses its own Certificate Authority.  Which your client doesn't like.  Your client is correctly warning you that someone is impersonating google.

    The solution is to install the XG's Certificate Authority as a Trusted Root Authority on all your computers.  This can be done with a AD push or other deployment solutions.

     

    See here for more:

    https://community.sophos.com/kb/en-us/132997

Reply
  • 0

    If you enable Captive Portal, and a user visits an HTTPS site, the XG needs to redirect the user from that website to the Captive Portal.

    Therefore it needs to do man-in-the-middle, impersonate the HTTPS website, and perform a redirect.

    When it does that, it uses its own Certificate Authority.  Which your client doesn't like.  Your client is correctly warning you that someone is impersonating google.

    The solution is to install the XG's Certificate Authority as a Trusted Root Authority on all your computers.  This can be done with a AD push or other deployment solutions.

     

    See here for more:

    https://community.sophos.com/kb/en-us/132997

Children
No Data