Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 26 subscribers
  • Views 2124 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Captive Portal is not appearing in Sophos XGv18

Madni Malik

Hi,

i have XG310 with AD integrated. i imported groups in XG. i created DNS rule kept on top and disable the default rule. in between these rules i created a user rule and called groups in that rule. also checked show portal for unauthenticated user checkbox in firewall rule. but when user open the browser captive portal does not appear automatically. user not able to browse. when i open https:firewallIP:8090 then portal appears. please advise how can i configure xg so that captive portal appears automatically.

i also followed below link

https://support.sophos.com/support/s/article/KB-000035954?language=en_US

https://www.youtube.com/watch?v=4KS3EckgLNs

please guide.



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi ,

    Thanks for reaching out to the Community! 

    Under Administration > Device Access, ensure that the Captive Portal is checked for the LAN zone and select AD server under Authentication > Services > Firewall authentication methods, move the AD server on top.

    Have you selected "Captive portal uses HTTPS" under Authentication > Services > Web policy actions for unauthenticated users (captive portal)? If yes, you'd have to import the SSL CA certificate from the firewall; check out the following KBA: Sophos XG Firewall: SSL CA certificate installation guide.

    Thanks,

Reply
  • FormerMember
    0 FormerMember

    Hi ,

    Thanks for reaching out to the Community! 

    Under Administration > Device Access, ensure that the Captive Portal is checked for the LAN zone and select AD server under Authentication > Services > Firewall authentication methods, move the AD server on top.

    Have you selected "Captive portal uses HTTPS" under Authentication > Services > Web policy actions for unauthenticated users (captive portal)? If yes, you'd have to import the SSL CA certificate from the firewall; check out the following KBA: Sophos XG Firewall: SSL CA certificate installation guide.

    Thanks,

Children
  • 0 in reply to FormerMember

    Hello Patel,

    thank you for reply.

    i did the same but i don't know why captive portal page is not appearing automatically.

    is there any way i can further troubleshoot it???

    as you mentioned in last of your reply that i have to import SSL certificate, let suppose if i did not import certificate then page will appear but with trust warning??? is that so???

    if i have 1000 or 2000 users then how can i import certificate on them.

    if users are with their own mobile phones or laptop then how can i import certificate to them. take an example of University  or Shopping Mall

    if i install any paid 3rd party certificate like Digicert on firewall , then in that case still i need to import that certificate on my users for captive portal to appear without any warning????

    regards,