Fortinet Wifi Captive Portal

Hello omerfg34, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Thanks, 

Hello

If I understand well you need to make an exception in you active portal, which is usually a basic feature in all (or most) active portals.

Since you have ISE active portal, I'm sure you can find in the ISE admin guide or Cisco forum how to configure exceptions in this software.

please refer to the following document for captive portal 

https://docs.fortinet.com/document/fortiap/7.4.4/fortiwifi-and-fortiap-configuration-guide/292926/captive-portal-security

> IOS and Android should not direct them directly to the captive portal.

That is done by the client OS probing for internet connectivity. A request to change this is a request to developers of IOS/Android, not Fortinet.

Thanks for your time. I found the solution. When I give an access to 'captive.apple.com', clients won't be redirected the portal automatically. When client tries to open a web page, then the client will be redirected.

The "continue without login" prompt usually happens after a connectivity-probe sent by the device detects a portal. You could in theory find out what those probed destinations are (this info should be searchable online) and exclude them from captive portal. However, keep in mind that when the users finally try to access something, it will typically be HTTPS in this day and age, and that will start triggering certificate warnings.