Captive Portal Support

SCP ensures consistent service across private and public networks, supporting seamless transitions for devices. When network changes occur, SCP temporarily bypasses traffic (fail-open) to establish internet connectivity. This is crucial for users relying on public Wi-Fi in locations like airports or cafés, where captive portal authentication is often required.

During this process, SCP cannot connect to the cloud proxy due to a lack of internet access. To enable users to complete authentication, SCP briefly fails open. Once connectivity is restored, it resumes forwarding traffic for inspection. A strict fail-close approach is incompatible with captive portal scenarios, as it would block users from gaining internet access, making fail-open essential for functionality.