Guest Access SSL problem

[Jason Baird]

I have a 720 and 740 configured for our internal network and it works flawless. I have setup guest access for patients and doctors at our hospital and everything works great, except any ssl (https) traffic immeditately gets a "Page cannot be displayed". I have boiled the issue down to ssl but I cannot figure this out. I have setup the internal and external proxy as per the docs but it's not doing ssl. It works just fine on our private network. Firmware is 4.4.0.50. Any ideas?

[Mohieddin Kharnoub · Accepted solution]

Hi

Do you have SSL, in the allowed traffic for Guests, i don;t think its allowed for Guest Access Policy like Authenticated access policy.

- Go to Access Policy in Rights > click on Guests > open Allowed traffic Tab > check for HTTPS.
- If not found, then go to Authenticated > allowed traffic, copy HTTPS parameters, then
- Back to guest access policy, add a new allowed traffic HTTPS.

Hope that will help.

Good Luck !!!

[Matt Hobbs]

I think your problem is going to relate to having configured the internal/external proxy on the 700wl series. It supports HTTP 1.0 only, HTTPS requires 1.1.

On one of the clients, have you tried setting your normal external proxy in their browser settings? That should do the trick.

Try to avoid using the 700wl proxy features where ever possible.

[Jason Baird]

I have tried setting it manually to our external proxy and it works just fine. Thing is I (we) don't want to have to enter this for our public access users. We would rather have them either Auto Detect it of have nothing selected in IE options. Is this possible?

Jason

[Matt Hobbs]

It can be done by configuring WPAD through your DHCP and DNS servers:

http://en.wikipedia.org/wiki/Web_Proxy_Autodiscovery_Protocol

No extra configured required on the 700 series, if the browser is set to automatically detect settings it should work.

Some other helpful pages if you do a google search for 'wpad dhcp dns'

This is about as good as you'll get (As far as I know).

Please assign points for any helpful replies you receive.

[Jason Baird]

This is very odd. When I check 'Use Automatic Configuration Script' everything works just fine, even the content filter we use works. When I check 'Automatically Detect settings' normal http traffic works just fine but only https is a problem, content filtering still works. I have setup DNS to publish wpad at w.x.y.z. What am I missing?

J