Captive portal and Web proxy conflict

[ackahforson]

I have made the following observation and would appreciate assistance. Running ver 17.1.1

1. Captive portal works great with user authentication for my lan and wifi guests
2. Web Proxy (transparent proxy ) works great with access restrictions

The issue is when I enable both captive portal (http transparent proxy enabled) and web proxy(http transparent proxy) in tandem.
I setup firewall rules per the documentation (https://docs.opnsense.org/manual/how-tos/proxytransparent.html and https://docs.opnsense.org/manual/how-tos/cachingproxy.html) to block proxy bypass and redirect traffic to proxy.

This brings about a whole lot of undesired effects:
1. web pages are incredibly slow to open on both lan and OPT1(wifi) interfaces
2. captive portal page usually does not show up for a new client on the network and when it does, there a redirect issues.

Any advice on how to set up OPNsense to catch all clients and present them with the login as well as benefit from the web proxy access control list feature will be much appreciated.

[fabian]

Can you retry it after upgrading to 17.1.2 (check the box in the captive portal settings instead of using a NAT rule in the firewall area)?

this fix is in the update from today.

[gaurovsoni]

see my reply here
https://forum.opnsense.org/index.php?topic=4679.0

[BriceMac4Pro]

I Also have the problem.
17.1.9

I follow the Documentation TUTO there :
https://docs.opnsense.org/manual/how-tos/cachingproxy.html  For Caching Proxy
https://docs.opnsense.org/manual/how-tos/proxywebfilter.html for Web Filtering
and https://docs.opnsense.org/manual/captiveportal.html for Captive Portal

Captive Portal Alone: Works great
Caching / Web Filter Proxy Alon : Works Great

But all together not working, i just saw a page one time, but it was super slow.

Maybe the doc is too old and need to be refreshed.
In addition here is my Firewall Configuration. LAN will be the Captive Portal network.

[franco]

Does setting Firewall: Settings: Advanced: [ x ] Shared forwarding help here?