Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Brandy
New Contributor

Captive Portal Viber Exempt

Were Using viber on our office workstation sometimes they using internet. is there a way to exempt viber on Captive portal? I tried to put HTTP, HTTPS even all TCP on exempt destinations and services but doesn't work

 

 

FortiGate 

 

 

 

 

3 REPLIES 3
AEK
SuperUser
SuperUser

You probably forgot to exempt DNS traffic (UDP 53).

AEK
AEK
Brandy
New Contributor

I tried it but still not working I did not know if this is correct.

 I add DNS on exempt services on interface, Then I create a 2 policy 

 

112 - policy to allowed DNS on port 9 and I clicked the exempt on top of my policy 111

111 - policy allowed user to access internet captive portal.PNGcaptive portal 2 policy 112.PNGcaptive portal 2 policy 111.PNG

kendall3
New Contributor

In order to see the URL being accessed, you need to do deep SSL inspection on the traffic, which runs contrary to standard guest access approaches. (if you have the opportunity to install your own root CA to a client machine, I wouldn't consider that to be a random guest device anymore) https://speedtest.vet/ 

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors