Tranpsarent Proxy Issue: Users has to connect again on Wifi SSID after sleep or reboot the Laptop with

[hashimwajid1]

Hi Team,

we are facing issue after enabling WSA transparent Proxy. our Users has to connect again on SSID Network after rebooting the laptop or Sleep mode. its very annoying. Users should not have to click again on Wifi SSID after Rebooting the laptop or sleep mode and it should be taken care by group policy but we are facing this issue after enabling Transparent proxy.

when we disable the Transparent Proxy we dont face any issue.

image is attached.

[Cristian Matei]

Hi,

    There has to be something else going on. I don't see how could a wired technology (WSA) affect a wireless association between the user and the AP.

Regards,

Cristian Matei.

[hashimwajid1 · Accepted solution]

i opened TAC case with Cisco and they provided below solution which worked for us.

https://support.microsoft.com/en-us/help/4494446/an-internet-explorer-or-edge-window-opens-when-your-computer-connects

Fix should be applied from MS side and from WSA side:

Please see the instructions below to work around the issue from MS side :

• Launch the Registry Editor by searching for "regedit" from the task menu. You must right-click and select "Run as Administrator".

• Navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet

• Under the Internet key, double-click "EnableActiveProbing", and then in Value data, type: 0.
• Click "OK".

• Restart the computer.

• These changes can be pushed to all clients as a Global Policy Object (GPO) using the Domain Controller.

On WSA side :

• Log into your WSA, navigate to Web Security Manager > Custom URL categories, and click Add Custom Category >> set the name of the category >> and add the sites list below in the site section :

• ncsi.glbdns.microsoft.com
• newncsi.glbdns.microsoft.com
• www.msftncsi.com

• Submit the entry once the configuration is complete.
• Then create an Identity profile matching on the custom category alongside the user agent “ Microsoft NCSI “ and set “NO AUTHENTICATION” for that identity .
• You can also create an access policy and attach it to this identity and set the action to ALLOW for the custom category  , Web Security Manager > Access Policies , then Submit and commit your changes .