USG Flex 200 Captive Portal / Walled Garden SSL error

FelixSchneider
FelixSchneider Posts: 49  Freshman Member
First Comment Friend Collector Third Anniversary
edited March 5 in Security

Hello,

i tried to link to a site where i state the Wifi AGBs which is hosted by cloudflair and uses SSL.

SSL_UNTRUSTED suggests that the USG Flex does SSL inspection even though I don't have a licence for this feature anymore.

Or is this expected with Captive Portal / Walled Garden when accessing HTTPS ?

Adding the Certificate is NOT an option because it's only for Guests.

Kind Regards

Felix Schneider

All Replies

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,511  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    HI @FelixSchneider,

    Once the Captive Portal is enabled in the firewall, it will redirect to an HTTPS authentication page. Since the redirect uses a self-signed certificate from the firewall, clients will see a certificate warning message.

  • FelixSchneider
    FelixSchneider Posts: 49  Freshman Member
    First Comment Friend Collector Third Anniversary

    Mhh, so either i use an insecure Website or Host it internally...

    Why this limitation ? Are there Plans to change this ?

  • FelixSchneider
    FelixSchneider Posts: 49  Freshman Member
    First Comment Friend Collector Third Anniversary
    edited March 7

    I only ask because Google Chrome and all Chromium based browsers enforce the Websites HSTS by default, meaning the normal user isn't able to view it at all… A few years ago one could just click something like "I want to continue on my own risk".

    But now I can't, it's not only a warning anymore.

  • zyman2008
    zyman2008 Posts: 219  Master Member
    25 Answers First Comment Friend Collector Seventh Anniversary

    Hi @FelixSchneider ,

    Give a try to disable the "Redirect HTTP to HTTPS" in System > WWW page.

  • FelixSchneider
    FelixSchneider Posts: 49  Freshman Member
    First Comment Friend Collector Third Anniversary

    Oh sorry forgot to mention I'm on Nebula Cloud Mode...

  • sylla
    sylla Posts: 3
    First Comment Second Anniversary

    Hello dear all I need help zyxel USG FLEX 200 captive portal I use it as a controller

Security Highlight