FortiClient Always-On VPN blocks captive portal authentication

“FortiClient Always-On VPN blocks captive portals - how to handle authentication on public Wi-Fi? We introduced a always-on VPN on our company laptop, which is enforced using FortiClient , managed via FortiEMS. The system runs Windows 11 Enterprise, and the firewall/antivirus is Windows Defender. The Problem: The issue arises when connecting to public Wi-Fi networks that use captive portals (e.g., in hotels, airports, cafés). Because the VPN is always-on, it immediately tries to establish a secur”