Captive portal from VLAN to access LAN

Question

Hello everyone, 
 I've just started playing with VLANS and successfully set one up for guest users. I have 2 rules for this guest network, 1 GUEST -> WAN without restrictions and 1 GUEST -> LAN with captive portal and show captive portal for unauthenticated users. 
 Problem is, from the guest network when I try to access a web page on LAN I don't get the captive portal page. If I go manually to https://x.x.x.x:8090 (x.x.x.x is the internal XG ip, 8090 is the captive portal port) it will show the captive portal and when I log on I have full access. 
 Any ideas?

Michael Dunn · Accepted Answer

We did a reorganization of the captive portal options in v18 to make it more understandable, although the underlying functionality is generally the same. That being said in v18 the "custom message" has been removed, so your current workaround is not a long term solution. 
 First thing, you can go to Administration > Admin Settings and change the hostname/ip that is used for the redirection - just in case it is choosing something not correct in your setup. That may be enough to fix you. 
 Next thing, the unauthenticated request might be hitting a firewall rule that you do not expect. I don't know how complex your setup is but maybe trying to temporarily moving the rule you want to hit to the very top precedence to make sure it is being hit.

lferrara · Answer

Panagiotis, 
 please make sure that Captive Portal is enabled for the zone where you want to have the access portal. 
 Please check these kbs: 
 https://community.sophos.com/kb/en-us/123592 
 https://community.sophos.com/kb/en-us/123165 
 Regards