Bypassing CAPTCHAs in the Symantec Web Isolation

Products

• Web Isolation Cloud

Issue/Introduction

The KB helps to bypass CAPTCHA validation in Isolated mode for following vendors:

• hcaptcha.com 
• reCAPTCHA 

Resolution

There are native mechanisms to bypass validation. 

hCaptcha

Steps below should be done by the end-user.

• • Browse to: hCaptcha
  • End-user needs to enter their own corporate email address and click submit.
  • Verify the mailbox. In email click the link that was sent to complete the registration.
  • In the new page, in the top-right corner click the profile button, then use an option set password or change password.
  • Supply a password and save it.
  • Browse to: hCaptcha.
  • Click the Set Cookie button.

At this point hCaptcha accessibility cookie should be stored in the TIE gateway and will be used every time user open the web site with hCaptcha validation. Steps above should be repeated, once accessibility cookies expire.

Note: Make sure the domains *.hcaptcha.com are Isolated. 

reCAPTCHA

In order to bypass google reCAPTCHA in Isolated mode, end-user should login to accounts.google.com using corporate or own account. 
In such scenario cookies will be stored in the TIE gateway and will be used every time user open the web site with reCAPTCHA validation.

Note: Make sure the domains *.google.com are Isolated.

Additional Information

Use following demo pages for testing purpose:

• hCaptcha
• reCAPTCHA