Action needed, no internet using PSK (WPA2) login

[vilmantasr]

Hello, with one SSID I always get requests in Windows 10, 11, Android, maybe Apple:  Action needed, no internet. Drivers, OS are latest. Problem only with this one SSID, settings are identical to others, so I don't understand why it always asks to open a web page to login.

[KarstenI]

What happens when you click “Open browser ..”? And are your firewall rules for this SSID blocking something?

[vilmantasr]

it opens http://www.msftconnecttest.com/redirect and OS shows, that internet is now connected. i think that is meraki firewall related, but which part is the question.

[PhilipDAth]

What is providing DNS, and what is providing the Internet access?

After connecting Windows is trying to access www.msftconnecttest.com and failing - so something is breaking that initial connectivity, even if it works later.

Are you using any software based firewall on the machines other than Windows firewall?
Do you have any web or content filtering software anywhere?

[vilmantasr]

Google DNS, only Meraki firewall.

maybe there is to much:

[PhilipDAth]

Actually, before you do anything, if you are not running stable firmware or better on your MX, upgrade to at least stable.

[PhilipDAth · Accepted solution]

You are not using one of those "personal" VPNs by chance?

As a punt, try removing all the Content Categories and see if the issue goes away.  If it does, add half of them back and re-test.  Repeat until you narrow down which content category is causing the issue.

I am most suspicious of "DoH and DoT" and "DNS Tunneling", so I would try removing those first.

[skytrooper20]

I have this exact same issue. I do not have the advanced security license and therefor am not using content categories nor threat categories. I am doing all firewall and security settings at the "Wireless" level and not the "Security and SD-WAN" level. WPA2 only, 802.11r enabled, 802.11w enabled. Captive portal strength block all access....,  walled garden disabled, external dhcp server assignment (single vlan), no group policies used, DNS nameservers - proxy to upstream DNS (also tried google public dns). 
Until I click on that windows side prompt "open browser and connect" the browser page and splash page will never trigger and appear; but once I click on that windows prompt, i get a new browser tab that opens with the www.msftconnecttest.com/redirect and then it successfully redirects to my splash page and then everything works perfectly fine.
I have tested this also with a UniFi wireless network that uses a splash page and get the same windows side prompt about open and connect. This doesn't appear to be strictly limited to meraki splash page.

[vilmantasr]

it seems that was the problem: I am most suspicious of "DoH and DoT" and "DNS Tunneling", so I would try removing those first.