Problem: When I go to the portals from my LAN zone I can get into all of them except the captive portal. Ports 4443 (user) , 4444 (admin) work. Port 8090 gives me an error in the browser: Firefox v133.0: PR_END_OF_FILE_ERROR Chrome v131.0.6778.87: ERR_CONNECTION_CLOSED…

I received a message from SSL VPN and Captive portal about a certificate issue. I created a locally-signed certificate and installed it on the client’s machine, but the error related to the certificate still appears. Could you please advise on this?

Hello All, We have a Sophos XGS connected to a metered WAN connection, in order for devices to connect to the internet the user must authenticate to the Sophos captive portal and at which point a weekly data transfer quota is applied. This has been…

Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents Overview Configuration Steps …

Sophos XGS 136 model in HA mode, having Version 20.0 MR2 Build 378. while performing Penetrating Testing we get LUCKY13 VA on port 8090. before version 20.0 MR2 we were having firmware 19.5 MR2 Build 624 with this firmware we are facing LUCKY13 VA on…

I have configured the captive portal of a wireless network created on the Sophos firewall to have access to the internet. The SSID of this wireless network is broadcast by a UBIQUITI access point. However, the captive portal does not work on this network…

My WiFi access points are connected through XG135 firewall capitive portal by creating user credentials. All the users are getting " this net work is untrusted/unsafe" message. What could be the reason

Hi We have a guest Wi-Fi allowing guest users the ability to login to a hotspot (password of the day) and access the internet. Is there a way to capture a username before they have access to the internet. I don't particularly want to have to create…

Good day, Sophos Captive portal has been enabled at our site and works but we noticed that if users move around the premises and roam to a different access point, they would have to reauthenticate using the captive portal. I had even set the signout…

Is there any way to implement a captive portal without any account or guest login? Just a disclaimer -> confirm -> web surfing allowed?

Hello Our client wants to limit access to his network, We installed and configured Sophos XGS2300 with web authentication, and the network has 3 VLANs . the challenge is that each time users roam out of the network, it requires them to sign in again…

Referring to this thread discussion. MFA on web authentication When this setting is used, MFA is not prompted for client VPN users. VPN users can login with username and password only. No MFA required. When "No OTP" is changed to "Specific Groups…

We have a community post 5 years ago regarding Captive portal on branch site with RED on standard/split setup. The answer was that is not possible because, in Standard/Split implementation, the internet traffic is routed directly from the RED to the…

1. Login with https://yourfirewall.domain.com:8090/httpclient.html 2. After Successful login Close tab / or closed accidently 3. Again open https://yourfirewall.domain.com:8090/httpclient.html It shows Sign in form with username and password.…

I;m following the few videos that I can find about how to set up Entra AD SSO for captive portal and VPN but I can't seem to get it working. Are there any step by step instructions that I can follow, other than the published Sophos videos, which seem…

Good Morning Sophos After uploading our company logo in CAPTIVE PORTAL customization preview in hotspot shows not reflecting all the changes specially in changing logo, Thanks in advance for the assistance.

Hello, I have the following problem. We want to manage our APX access points in Sophos Central because we also have outdoor antennas that cannot be managed via the firewall. Now we have the problem that the hotspot guest network cannot be adjusted…

Hello, i have confiure captive portal page in sophos firewall and created user grp called (TEST_GRP). i have also created rule for lan to wan and under match rule i have selected user group called (TEST_GRP). but right know what happen is the entire…

Hi All, I'm facing issue with captive portal, some of my users are getting error The Connection has Timed out and the server is taking too long to respond. For some users captive portal is popoing automatically but for the some it's getting issue. Thank…

Hallo, ich habe folgendes Problem. Wir wollen in Sophos Central, gezungendermaßen, unsere APX Access Points verwalten, da wir auch Outdoor Antennen haben welche nicht über die Firewall verwaltbar sind. Nun haben wir das Problem das sich das Hotspot…

The captive portal has an option to run in HTTP. But the guest user self registration page by default shows up in HTTPS. Is there any way to make it work in HTTP? We want to avoid any certificate errors.

Hello All, I have recently setup the captive portal on our XGS device, I have the portal running on https with a valid public certificate. Android devices work just fine, the user connects to the open network and the android device redirects to the…

Hi, as the Android/iOS Authentcator is going EOL, I tested something with the WebAuth Captive Portal and changed the setting from "when captive portal page is closed or redirected" to "when user is inactive" I notice the userexperience is here…

Hello, we are missing some features since our migration to Sophos. We put these as ideas in the portal which is now gone. Now nowbody knows what is suggested and there is no feedback, too. So as a question to the insiders: will the hotspot function…

I have configured a captive portal for users authentication, for some purposes i have to bind each user with a specific MAC address, can any one help me Best regards