This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Filter Policy Blocking - Page for Users

Hello,

I am having an issue, in which users, after hitting a blocked website, are redirected to a page in the firewall that doesn't exist. 

If a user accesses Netflix and is blocked, it will be redirected to:

https://<XGFIREwall_FQDN>:8091/ntlmauth.html?www.netflix.com

The message they see on the web browser is:

Hmmm… can't reach this page

It looks like <XGFIREWALL_FQDN> closed the connection

However I am not sure what port 8091 is.  

Other times, the page I would expect it to appear (something like below), does appear, but not all the time:

https://static.techbast.com/2019/09/LInk5.png

Is there something I am not configuring properly?



This thread was automatically locked due to age.
  • Hello cm00001,

    Thank you for contacting the Sophos Community!

    Port 8091, is usually the port for Captive Portal.

    In your case, this seems to be an issue related to NTLM authentication. 

    What type of authentication are you using? 

    For option related to NTLM go to Configure >>Authentication >> Web Authentication >> Authorize unauthenticated users for web access

    Also, make sure that under

    System >> Device Access >> Captive Portal is enabled, for the zones where you are using the Authentication.

    Regards,

  • Thanks Emmanuel.  The only change I did was to change the AD SSO Mechanism from NTLM to Kerberos & NTLM, and that seemed to do the trick. Thanks for the help!