The captive portal comfort page is not loading custom images from third-party sites properly.
6225
Created On 11/09/22 16:19 PM - Last Modified 12/02/23 00:59 AM
Symptom
- When configured with external third-party images, the Captive Portal response page will not display the images.
Environment
- Palo Alto Firewalls
- Supported PAN-OS
- Captive Portal configured
Cause
- This is seen when captive portal is enabled for all traffic from Trust zone to Untrust (to the internet)
- Captive Portal will also be applied to the custom image site, which will prevent logo/image loading without prior authentication
- Therefore, 3rd-party images will not load correctly on the response page
Resolution
- Create a Custom URL Category for the external image's URL.
Example: In this example, the following image link is used
> www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/brand/primary-company-logo/PANW_Parent_Brand_Primary_Logo_RGB.png
- Create a new Authentication Policy including the above-created URL category with the action as 'default-no-captive-portal' and put the rule on top of all rules.
- Commit and Verify the working