Agreed, Alan, I found the same, and I do understand what Sophos is after - every user, authenticated, every time. I imagine we'd get a nice, pretty block screen if we logged in with a user that did not have access... Per the per the docs, at least, per my understanding of the docs, that's not "how it's supposed to work." When Redirection is set to no, the user should not be redirected AT ALL - and should just receive a message saying it is blocked. From docs.sophos.com/.../index.html [quote] Captive Portal Settings Unauthenticated users redirection Select "Yes" to redirect the access request of unauthenticated user either to the Captive Portal or Custom Message page. Select "No" to display "Access Denied" message to unauthorized user. [/quote] I've opened a ticket w/ Sophos support. I'll let you guys know what they say.
↧