Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 26 subscribers
  • Views 6698 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Wifi client traffic to hotspot authentication page is being blocked by firewall

Stephen Zuluaga

I've set up one of the Sophos XG's interfaces to service wifi guests, they can sucessfully authenticate, get a DHCP address and access the internet. When I try to activate the hotspot for clients on that network, I can see the browser being redirected to the login page of the XG's wifi guest interface, but the firewall log shows requests to the interface on TCP:4501 being denied by Firewall rule 0.

  • The interface(a VLAN interface) for Wifi guests is in the WiFi zone that is present by default.
  • This is a 3rd party AP.
  • Clients are redirected to a login page they are being denied access to.

When hotspot is off everything works fine, I can browse the internet with these clients. Is it a bug that when the hotspot is turned on the firewall for the hotspot page is not changed to allow?

 

Note:

I am trying this on a client which has a static DHCP allocation on the LAN zone and one that does not. I had an issue where the statically allocated client wasn't being allocated an IP until I followed the step in this. https://community.sophos.com/kb/en-us/123952.



This thread was automatically locked due to age.