Skip to main content
kd007
kd007
New Member
August 28, 2018
Question

Off-Net Web Filter Blocking Captive Portals as "Unknown"

  • August 28, 2018
  • 1 reply
  • 22119 views

Recent problem discovered after we updated EMS to v6.0.1 and pushed out FortiClient v6.0.1 to clients. One of our traveling users has reported that FortiClient is blocking captive portals, such as the airline's wifi purchase portal and hotel wifi login pages. It says that the site's category is "Unknown" (presumably because there's no connectivity to do a lookup) but I have no option in EMS to allow sites when lookup fails, nor to allow an "Unknown" category. The closest category is "Unrated" but we're already allowing these.

Anyone run into this before? This was not a problem prior to v6.0.1 (we skipped 6.0.0)

    1 reply

    kd007
    kd007Author
    New Member
    August 28, 2018

    May have just found my answer in the XML. Found this when checking an endpoint's config:

    <webfilter>
     <profiles>
     <profile>
     <categories>
     <fortiguard>
     <action_when_unavailable>deny</action_when_unavailable>
     </fortiguard>
     </categories>
     </profile>
     </profiles>
     </webfilter>

     

    Testing here shortly.

    CoSax
    CoSax
    New Member
    September 5, 2018

    Any updating from testing.

    kd007
    kd007Author
    New Member
    September 5, 2018

    cosmak wrote:

    Any updating from testing.

    I never heard back from my end user on whether or not this fixed the issue... but I am assuming so since I did not hear back.

    Terms & ConditionsAccessibility statement