FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
kajlasunil
Staff
Staff
Article Id 384491
Description This article explains the possible misconfiguration that caused the captive portal to show up twice.
Scope FortiOS, FortiAP.
Solution

A Captive Portal Disclaimer SSID in FortiGate refers to an SSID (Wi-Fi network) that requires users to accept a disclaimer or terms of use before they are granted network access.

When a user is connected to an SSID and accepts the disclaimer, the same disclaimer appears again.

 

captive.png

 

This happens when the Disclaimer is enabled on the SSID configuration and the Firewall policy.

 

config wireless-controller vap

    edit "fortinet"

        set passphrase ENC xyz

        set captive-portal enable

        set portal-type disclaimer

        set schedule "always"

    next

end

 

config firewall policy

    edit 3

        set name "AP"

        set uuid 810e8fe0-58c5-51ef-29e5-15cd9ca38e14

        set srcintf "fortinet"

        set dstintf "wan1"

        set action accept

        set srcaddr "all"

        set dstaddr "all"

        set schedule "always"

        set service "ALL"

        set logtraffic all

        set nat enable

        set disclaimer enable

    next

end

 

To fix this issue, the disclaimer needs to be disabled on the SSID or the Firewall policy.

 

Related article:

Technical Tip: Configuring a disclaimer page on a FortiGate SSID