How to block user skip authentication and directly access the Internet via HTTP (Reyee EG Wifidog Authentication)

Key Words

Wifidog，VPN ,skip portal

Issue Description

Captive portal authentication is configured, but users can bypass the authentication and directly access the Internet by connecting to a VPN. The approximate process is as follows:
End point connects to Wi-Fi > Portal interface pops up, without entering authentication account, close the portal page > Open VPN software, establish VPN connection > Internet access is normal.

Cause Analysis

VPN software bypasses authentication to access the Internet via HTTP
Solution (VPN Software Type : Bypass Authentication via HTTP)
Common Software：
HA Tunnel Plus/HTTP  Injector
Cause Analysis:
Such software can send specific HTTP packets.
Solution
Enable HTTP injection attack prevention on Reyee EG





If the issue persists after enabling, the customer's cooperation in testing is required. TAC will capture data packets on the EG to confirm the packets camouflaged by the VPN software for further confirmation on how to resolve the issue.