Why is this screen popping up as soon as I connect to the network?

[okan]

My policies are based on AD groups. I assume this screen is trying to authenticate me before I open a browser window but I can't make it load properly. I have the necessary certificates installed, if I try to browse a webpage I already get a username and password prompt and can authenticate and browse without problem. But this screen keeps popping up until I open a browser and authenticate.

I have set the auth portal to my fw address, installed wildcard certificate that my fw uses and also the Fortigate's certificate for SSL check and I am not getting any SSL errors at all. What am I missing?

This is probably a silly rookie question, I am sorry. Any help is appreciated!

[okan]

This is definitely not a hack. I am sure it's just some misconfiguration either on Fortigate or client machines.

[hbac]

Hi @okan,

I see you are using MacOS. Does it work on a Windows computer? 

Regards, 

[okan]

On windows, an "action needed" notification pops up, when you click on that it's opens a browser window, asks username and password and then shows this page...

Now, clicking refresh doesn't do anything.

If you type another URL after this, it opens this "Connect to a WiFi hotspot" screen.

When you click connect it redirects too this fw authentication url but an empty page shows up

But at this point you generally have internet connection...

[hbac]

@okan,

Are you using WiFi or Ethernet? I see it is redirecting to the authentication page 'fw-xxxx'. Does it resolve to the IP address of the FortiGate? 

Regards, 

[okan]

Sorry for the late response, it is happening only on WiFi. When using ethernet, that error doesn't show up and user is authenticated automatically. And yes, it resolves to the IP address of the FG.

[okan]

Sorry for the late response. Yes, I checked settings but couldn't find the issue anywhere. I am sure I am missing something somewhere. I guess you mean captive portal :beaming_face_with_smiling_eyes: I'll check it again, maybe I'm missing something there...