When an iOS device connects to a network with a captive portal (such as hotel or airport Wi-Fi login pages), the iOS Network Enforcer in always-on or per-app Prisma Access Agent deployments can block access to the captive portal, preventing end users from connecting to the internet. While iOS attempts to handle this natively, the operating system (OS)-level detection can be inconsistent, causing the login screen to never appear.

In per-app deployments, if the OS fails to present the login page automatically, the app now displays a local notification stating a captive portal is present. Users can tap this notification to manually open the captive portal within the Prisma® Access Agent embedded browser and complete authentication. Users can then enter required credentials, accept terms of service, and complete the authentication process successfully to access the internet.