Setup Option #3:
Alternate Setup
The following configuration blocks all tra
ffi
c to the
Internet. Users must log in though the captive
portal to have access to HTTP and HTTPS tra
ffi
c.
All other tra
ffi
c is blocked, preventing Skype, apps
on smartphones, and other P2P applications from
working. This setup also has the advantage of
passing HTTPS tra
ffi
c through the filtering proxy
server that allows the administrator to block sites.
Users, when using this alternate setup, will
need to change the default settings in their
web-browsers and use the direct captive portal
login link to login.
The following procedure will enable the alternate
setup:
1. Log in to the Optimizer Voice admin portal.
2. Navigate to Network > Firewall > Tra
ffi
c Rules
3. Uncheck the first 6 rules at the top of the list
labeled “XX - DO NOT MODIFY” where XX is
ALL, PASS DNS, DNS, HTTP, HTTPS, and FTP
4. Select “Save and Apply” at the bottom of the
page. This will modify the firewall to block
access to all tra
ffi
c, including DNS.
5. Instruct the end user to modify their browser
configuration to enable “Automatic Proxy
Detection”. For Firefox this is done under
Preferences > Advanced > Network > Settings
9
