If using a Network rule (instead of a User rule), when a category or file extension is blocked, Copernicus shows the Network Authentication page (see attachment).
Actually, the only way I have found is to use a custom message instead of the captive portal. You go in : System > Authentication > Authentication Services, below you have "Captive Portal Settings", there you select "Custom Message" instead of captive portal. PLease find attachment as example.