Internet is accessible before authenticate - Social login

[roshan_menaka]

Hi,

I have setup a SSID with social media login with Ruckus unleashed.

When the authentication page is open to select the social login. clients are able to access internet using another tab or browser. even they can do a google search and select the link without authenticating.

Also they get the IP address which can ping or access all the other internal resources without authenticating.

[syamantakomer]

Hi @roshan_menaka,

Thanks for reporting the issue.

Could you confirm more details like what AP model you are using, what is the firmware version?

For social auth, what social media application you are using?

[roshan_menaka]

Hi,

We are using R720 with firmware version 200.7.10.202.127.

We have tested by upgrading the firmware to latest 200.12.10.105.129

But still the issue same.

Also with the new firmware version there is an option to specify a domain name for google authentication. With this also we found that even you enter a personal gmail for authentication your not able to authenticate. But with the error if you try access your personal email in another tab it is possible though your outside the domain.

[syamantakomer]

Are you able to browse anything other than Google sites? Could you try accessing any other secured public site while user is not authenticated and not authorized?

Please share  your WLAN settings so that we can try to reproduce and check.

[roshan_menaka]

Hi,

Thank you for looking in to this.

Basically in any browser is able to run search engine when you type anything on address bar. such as google on chrome , bing on Edge or IE. Also any internal resources in the LAN.

Google not only email can access other services like meeting, YouTube ect.

Following is WLAN settings