Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 26 subscribers
  • Views 11986 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Windows 10 Laptop users getting Action Needed prompt on Wireless

Gatt

This has been an issue with both V17 and now V18, and only affects windows 10 wireless devices

 

The problem is that when they go through the XG they get an "Action Needed" prompt on their Wifi connection

When they click on it, it connects, but then a browser window opens to take them to http://www.msftconnecttest.com/redirect

Once this has happened they are then able to use all the network resources.

 

This causes problems in that they cannot get mapped drives, and policy settings do not apply at startup and login

 

If they have a network cable connected, then there is no issues at all 

The same laptop reconfigured to use our old Sophos UTM, they have no issues and connect immediately to the WLAN and the Internet.

 

All devices are configured to use the LAN zone as we're not using any managed Wifi settings (we have no compatible APs connected and have also disabled the Hotspot and Captive Portal settings) , but still the users get prompted for this

 

We don't see this on any other wireless device (specifically Android and iPhone devices)

 

It's not the laptops as they connect fine when pointed to the older UTM as stated. 

This only happens when pointed to the XG Firewall..

 

Is there something I am missing to stop this behaviour?



This thread was automatically locked due to age.
Parents
  • 0

    Hi  

    Thank you for your detailed post, as per my understanding LAN users >> Wifi >> XG >> Prompt will be there, apart from this scenario, it is working fine without any problem.

    Are you getting prompt when you connected through LAN cable but traffic is passing from XG? If there is an issue with XG, it should prompt while LAN cable or wifi connection on Laptop.

    Could you please create a test firewall (Source IP based) rule for any WLAN user and do not apply any restriction and let us know the output, please place the rule on top.

  • 0 in reply to Keyur

    Thanks for the reply

     

    Looking at it, it might be a combination of XG and Windows 10..

     

    It only happens on WiFi connections, the prompt does not appear when a LAN cable is connected.
    Also, as I said, I get no prompts when using UTM (same laptop on same WiFi) 

     It only appears when using a laptop via XG Firewall over WiFi.

    I have, however since found that there is a "feature" of windows 10 regarding NCSI probes.
    And, as a workaround been able to disable it via the Registry: 

    Set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet\EnableActiveProbing to DWORD Value: 0  

    Not sure if there is something happening between Windows 10 and XG that keeps triggering the NCSI Probe to kick in. 

Reply
  • 0 in reply to Keyur

    Thanks for the reply

     

    Looking at it, it might be a combination of XG and Windows 10..

     

    It only happens on WiFi connections, the prompt does not appear when a LAN cable is connected.
    Also, as I said, I get no prompts when using UTM (same laptop on same WiFi) 

     It only appears when using a laptop via XG Firewall over WiFi.

    I have, however since found that there is a "feature" of windows 10 regarding NCSI probes.
    And, as a workaround been able to disable it via the Registry: 

    Set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet\EnableActiveProbing to DWORD Value: 0  

    Not sure if there is something happening between Windows 10 and XG that keeps triggering the NCSI Probe to kick in. 

Children
  • 0 in reply to Gatt

    Hi  

    I have tried to verify the service NLA from the given path.

    NLA - Network Location Awareness

    Collects and stores configuration information for the network and notifies programs when this information is modified. If this service is stopped, configuration information might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

    Could you please check AP configuration? Are you using any authentication in XG or AP for users to access the Internet.

  • 0 in reply to Keyur

    Think there might have some confusion here

     

    The above registry key shouldn't disable NLA, just the Active Probing parameter which is linked to NCSI / Network Connectivity Status Indicator by checking if it can access the URL from my OP

    Not sure on the specifics myself as it took a fair amount of Googling to get the registry key to turn off the probe.

    See: https://www.ghacks.net/2014/02/07/disable-customize-windows-internet-connection-test-improve-privacy/

     

    Why it's not working with XG over WiFi.. I have no idea

  • 0 in reply to Gatt

    Hi  

    I understand the concern and even I have tried to search on it after you have provided registry hives, this is a strange issue.

    Did you check by changing the AP because the issue occurred when there is an AP + XG combo to route the wifi traffic?