Created on
03-26-2025
07:33 AM
Edited on
07-20-2025
11:46 PM
By
Anthony_E
Description | This article explains the possible misconfiguration that caused the captive portal to show up twice. |
Scope | FortiOS, FortiAP. |
Solution |
A Captive Portal Disclaimer SSID in FortiGate refers to an SSID (Wi-Fi network) that requires users to accept a disclaimer or terms of use before they are granted network access. When a user is connected to an SSID and accepts the disclaimer, the same disclaimer appears again.
This happens when the Disclaimer is enabled on the SSID configuration and the Firewall policy.
config wireless-controller vap edit "fortinet" set passphrase ENC xyz set captive-portal enable set portal-type disclaimer set schedule "always" next end
config firewall policy edit 3 set name "AP" set uuid 810e8fe0-58c5-51ef-29e5-15cd9ca38e14 set srcintf "fortinet" set dstintf "wan1" set action accept set srcaddr "all" set dstaddr "all" set schedule "always" set service "ALL" set logtraffic all set nat enable set disclaimer enable next end
To fix this issue, the disclaimer needs to be disabled on the SSID or the Firewall policy.
Related article: Technical Tip: Configuring a disclaimer page on a FortiGate SSID |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.