Skip to main content
Brandy
New Member
February 15, 2024
Question

Captive Portal Viber Exempt

  • February 15, 2024
  • 3 replies
  • 1349 views

Were Using viber on our office workstation sometimes they using internet. is there a way to exempt viber on Captive portal? I tried to put HTTP, HTTPS even all TCP on exempt destinations and services but doesn't work

 

 

FortiGate 

 

 

 

 

3 replies

AEK
SuperUser
SuperUser
February 15, 2024

You probably forgot to exempt DNS traffic (UDP 53).

AEK
Brandy
BrandyAuthor
New Member
February 15, 2024

I tried it but still not working I did not know if this is correct.

 I add DNS on exempt services on interface, Then I create a 2 policy 

 

112 - policy to allowed DNS on port 9 and I clicked the exempt on top of my policy 111

111 - policy allowed user to access internet captive portal.PNGcaptive portal 2 policy 112.PNGcaptive portal 2 policy 111.PNG

kendall3
New Member
February 15, 2024

In order to see the URL being accessed, you need to do deep SSL inspection on the traffic, which runs contrary to standard guest access approaches. (if you have the opportunity to install your own root CA to a client machine, I wouldn't consider that to be a random guest device anymore) https://speedtest.vet/ 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!