FortiProxy
FortiProxy provides enterprise-class protection against internet-borne threats and Advanced Web Content Caching
duenlim
Staff
Staff
Article Id 323976
Description This article describes that after the browser is configured with Proxy settings the Windows 10 or 11 network indicator shows 'No Internet access'.
Scope Explicit Proxy.
Solution
  1. The Windows 10 or 11 using web probe (HTTP) requests are sent to Connect Test to determine the Internet Access. Refer to the relevant information below:


Network Connection Status Indicator (NCSI) troubleshooting guidance
How to collect data to diagnose NCSI issues

 

  1. On FortiProxy packet capture, it is possible to see that Microsoft NSCI tried to make some web requests to FortiProxy and got a response with 'Microsoft Connect Test'. The network status taskbar will show 'Internet'.

     

    WndowsNetworkIndicator.png

    No. Time Source Src Port Protocol Destination Dst Port TCP Segment Len Info
    300 49.026313 10.176.2.144 41827 HTTP 10.176.2.168 8080 141 GET http://www.msftconnecttest.com/connecttest.txt HTTP/1.1
    Hypertext Transfer Protocol
    GET http://www.msftconnecttest.com/connecttest.txt HTTP/1.1\r\n
    Connection: Close\r\n
    User-Agent: Microsoft NCSI\r\n
    Host: www.msftconnecttest.com\r\n
    302 49.081218 10.176.2.168 8080 HTTP 10.176.2.144 41827 168 HTTP/1.1 200 OK (text/plain)
    Microsoft Connect Test

     

    310 49.103363 10.176.2.144 41828 HTTP 10.176.2.168 8080 184 GET http://www.msftconnecttest.com/connecttest.txt HTTP/1.1
    312 49.117145 10.176.2.168 8080 HTTP 10.176.2.144 41828 168 HTTP/1.1 200 OK (text/plain)

     

    Note that FortiProxy has no control over the Microsft NCSI. As long as the web probe HTTP requests are reached by Proxy, then the Proxy will take action based on Policy configuration.