We have a captive portal in identifi with a NON auth policy containing "Allow "rules pointing to Facebook and twitter services.
The facebook ones seems wo work just ok, however the twitter domains doesn work so well, even thou Facebook is more complex and twitter use just two domains "twitter.com" and "twimg.com" (and all those sub-domains).
The clients get stuck time after time on http calls to those domains, or receive certificate warnings...
attached a picture
![be310f3a9b21438faba33f9bd7cdc371_RackMultipart20180604-47334-ivrcd-Captura_de_pantalla_2018-05-3_inline.png be310f3a9b21438faba33f9bd7cdc371_RackMultipart20180604-47334-ivrcd-Captura_de_pantalla_2018-05-3_inline.png](/t5/image/serverpage/image-id/1913iF8B35875622E43E2/image-size/large?v=v2&px=999)