topic Captive portal access failure using google chrome in Firewall and Security Management

Captive portal access failure using google chrome

User-checkpoint — Tue, 06 Oct 2020 09:22:22 GMT

Hi Team,

One of the customer environment having R80.30 take 217 distributed architecture. When accessing captive portal via google chrome we are getting error but captive portal can be accessed via other browsers like Firefox or internet explorer. Even if I'm accessing captive portal URL error persist.

We have identified while accessing captive portal via google chrome, chrome initiates the traffic to gstatic generate_204 page it was blocked by Internet/computer category, once we allow this category captive portal is accessible via chrome browser.

So to access internet user must login to the captive portal but if user wants to access captive portal via chrome that required internet access??😜

Herewith I have attached screenshots as well.

Re: Captive portal access failure using google chrome

G_W_Albrecht — Tue, 06 Oct 2020 11:24:18 GMT

I would suggest to contact TAC about this !

Re: Captive portal access failure using google chrome

Chris_Atkinson — Tue, 06 Oct 2020 11:47:23 GMT

Can you confirm if chrome is using the Data saver or Quic options and if those have any bearing on your symptoms?

Re: Captive portal access failure using google chrome

Mithu — Tue, 06 Oct 2020 12:01:01 GMT

Quic protocol is disabled on a browser level, we are facing the same on laptops and mobile phones as well.

Re: Captive portal access failure using google chrome

Mithu — Tue, 06 Oct 2020 12:06:07 GMT

I have opened TAC but we are clueless, TAC suggested some adware is running on the machine, but I don't think so. Since this issue persists from most laptops and mobile phones as well.

Re: Captive portal access failure using google chrome

PhoneBoy — Wed, 07 Oct 2020 03:04:04 GMT

Please show the log card where the gateway is dropping this connection, redacting sensitive details.
I suspect you can create an allow for the specific URL/host being accessed.

Re: Captive portal access failure using google chrome

User-checkpoint — Wed, 07 Oct 2020 03:18:26 GMT

Herewith I have attached rule base which is created for test PC which is 172.16.30.254 , In the block message We have instructed to users to click here to authenticate, once user click the hyperlink captive portal will open in new tab.

Although if I enabled 4th rule captive portal can be accessible in the meantime some other websites like google can be accessible.

Re: Captive portal access failure using google chrome

PhoneBoy — Wed, 07 Oct 2020 04:09:58 GMT

That's not the question I asked.
Please show the precise entry in the logs where the page is blocked.
Click on the line in SmartView and bring up the log card.
Based on this we can change Rule 4 so it’s more precise.

Re: Captive portal access failure using google chrome

User-checkpoint — Wed, 07 Oct 2020 05:02:30 GMT

Herewith I have attached requested traffic log, in the mean time we can see google chrome trying to access URL- gstatic.com/generate_204