VPN does not allow connections to most Wi-Fi when traveling

[TomK_ODonnell]

When I am traveling on most air lines (Southwest, United, Alaska) I usually have to turn the VPN off so I can connect to their WiFi. Is this normal?

[bjm]

@TomK_ODonnell

When I am traveling on most air lines (Southwest, United, Alaska) I usually have to turn the VPN off so I can connect to their WiFi. Is this normal?

Hello @TomK_ODonnell

The Summary

• The Problem: Airline Wi-Fi requires you to pass through a local login screen (captive portal) before granting internet access. Because Norton VPN immediately encrypts your data and hunts for an outside server, it blocks the airline’s ability to show you that login page.
• The App-Level Limitation: While Norton offers Split Tunneling, it only allows you to exclude entire apps (like a whole web browser), not specific web addresses.
• The Security Risk: Excluding your entire browser via Split Tunneling means your actual web surfing is left completely unprotected on the public aircraft network.

---

Workarounds to Try

1. The “Off-Then-On” Toggle (Recommended & Safest)

This remains the most secure method because it ensures your data is encrypted once you are online.

• Step 1: Turn Norton VPN completely off before connecting to the Wi-Fi.
• Step 2: Connect to the aircraft Wi-Fi and complete the login/payment screen in your browser.
• Step 3: Once you are browsing the live internet, open Norton and turn the VPN back on.

2. The Designated “Sacrificial Browser” Strategy

If you want to use Split Tunneling without compromising your security, use two different browsers.

• Step 1: Set a secondary browser (e.g., Microsoft Edge or Firefox) to bypass the VPN in Norton’s Split Tunneling settings. Keep your main browser (e.g., Chrome or Safari) protected.
• Step 2: When you board, open the secondary browser to load and pass the airline’s login screen.
• Step 3: Once connected, switch over to your main browser for all your actual internet use so your traffic stays encrypted.

3. Force-Load the Portal Page

Sometimes a VPN “remembers” a block even after you toggle it off, causing the login page to spin forever. If the airlin e page won’t load, turn the VPN off, open your browser, and type one of these universal trigger addresses into the URL bar to force the login page to appear:

• 192.168.1.1
• neverssl.com

Southwest, United, and Alaska airlin es all use the same captive portal system that causes this specific issue with your VPN. However, each airlin e has unique network restrictions you should keep in mind for your next flight:

Airlin e-Specific Rules

• Southwest Airlin es: Southwest specifically limits bandwidth on its Wi-Fi network. They explicitly block high-bandwidth activities (like Netflix and Zoom) and use heavy content filtering. If you turn Norton back on after logging into Southwest Wi-Fi, you may find that the VPN is entirely blocked or frequently drops because the network automatically cuts off encrypted VPN protocols.
• United Airlin es: United is currently in the middle of rolling out free, ultra-fast Starlink Wi-Fi across its fleet. If you are on an older United plane (using Viasat or Panasonic), you must turn off your VPN, pay or log in at unitedwifi.com, and then turn it back on. On these older planes, leaving a VPN on will completely choke the connection. On newer Starlink-equipped planes, the bandwidth is much higher, making it much easier to run Norton VPN seamlessly after your initial login.
• Alaska Airlin es: Similar to United, Alaska Airlin es is actively upgrading its fleet to Starlink Wi-Fi. According to Alaska Airlin es Inflight FAQs, they do some light content moderating but generally allow most standard web traffic. You will absolutely have to turn Norton off to load AlaskaWiFi.com. Once you put in your details to connect, you can usually flip Norton back on without a problem.

Pro-Tip for these Three Carriers

Because all three airlin es allow you to use their Inflight Entertainment Hubs for free (to watch movies or track the flight map), turning your VPN back on can sometimes block you from viewing the airlin e’s movie library. If you want to watch the airlin e’s free movies, you will likely need to leave Norton turned off. If you are just browsing the web, keep Norton toggled on for your security.

Do you usually use the inflight entertainment (like movies or the flight tracker map) on these airlin es, or are you primarily trying to browse the web and check emails?
I ask because inflight movie streaming systems use local servers inside the airplane’s cabin rather than the actual internet.

When you turn Norton VPN back on, it forces your device to search for a secure server down on the ground. Because of this, the VPN completely cuts your device off from the airplane’s local network.

How this impacts your flight:

• If you want to watch movies: You cannot use the VPN. Norton will block the connection to the airplane’s local movie library, and you will get an error message.
• If you want to check emails: You should use the VPN workaround. Your data travels over the actual satellite internet, where Norton is needed to encrypt your passwords and personal information.

Reviewing the carrier’s Wi-Fi terms or FAQs before your flight is recommended, especially if you rely on a VPN for work or privacy.

Airlin es frequently change their network rules, bandwidth limits, and tech providers. Checking ahead gives you a clear picture of what to expect:

What to Look For in the Terms

• VPN Support: Look for explicit statements in their FAQs about whether they allow Virtual Private Networks (VPNs). Some airlin es openly state they block or don’t support corporate or personal VPN protocols to save bandwidth.
• Streaming Policies: Check if the Wi-Fi tier you are buying actually supports streaming or encrypted data, as some basic tiers only allow text messaging and low-bandwidth web browsing.
• Provider Upgrades: Look to see if the airlin e has upgraded your specific flight to a high-speed provider (like Starlink or Viasat), which are much more friendly to VPN connections than older satellite systems.

Quick Links to Terms
You can review the current connection guidelines and network rules for your frequent carriers here:

• Southwest Airlin es Inflight Connectivity
• United Airlin es Inflight Wi-Fi FAQ
• Alaska Airlin es Inflight Entertainment & Wi-Fi

United Airlin es Inflight Wi-Fi FAQ explicitly outlines how to connect, what activities are permitted, and how their network interacts with security software:

Connection Basics

To successfully reach the United captive portal, you must follow their specific connection sequence:

1. Turn on Airplane Mode after boarding your aircraft.
2. Enable your device’s Wi-Fi and connect to the “United_Wi-Fi” network.
3. Open your internet browser and navigate to unitedwifi.com.
4. Select a free tier (like complimentary text messaging) or purchase a full flight pass.

VPN Support Policy

According to United’s Inflight Wi-Fi Guide, VPN connections are fully supported on their network once you are authenticated. Their system does not block corporate or personal VPN protocols by default. However, their security guidelines reiterate exactly why you encounter trouble initially: you must pass through the portal first before the network will route your encrypted VPN traffic to the ground.

Restricted Network Activities

Even with a high-speed connection, United explicitly blocks specific traffic types at the router level for all users, regardless of whether you use a VPN:

• Voice calls (such as FaceTime Audio, Skype, or WhatsApp calls) are strictly prohibited.
• Video conferencing (such as Zoom or Microsoft Teams) is blocked to preserve cabin quietness and bandwidth.

Changing the protocol will likely provide no help at all for the initial connection, but it can be highly effective if your VPN gets blocked after you log in.

Here is how changing protocols affects your connection in both stages of a flight:

1. Initial Connection / Login Stage: No Help

Changing the protocol will not fix the initial captive portal block.

• Why: No matter which protocol you select (WireGuard, OpenVPN, etc.), the airlin e’s Wi-Fi router intentionally cuts off all traffic to the outside world until you pass the login screen.
• The Result: The VPN protocol doesn’t matter because the router won’t let any protocol communicate with Norton’s ground servers. You must still turn the VPN off to log in.

2. After-Login Stage (Keeping the VPN Connected): Helpful

If you successfully pass the login screen, flip Norton back on, and find that it refuses to connect or keeps dropping, this is where changing the protocol helps immensely. Airlin es like Southwest often block standard VPN ports to conserve bandwidth.

If you go into Norton Settings → VPN Protocol, you can manually switch between options to bypass these restrictions:

• Switch to “Mimic”: This is a proprietary Norton protocol. It wraps your VPN data so that it looks exactly like regular, unencrypted web browsing traffic (HTTPS). Airplane routers usually can’t tell the difference, allowing you to bypass airlin e VPN blockers.
• Switch to “OpenVPN (TCP)”: Standard VPN traffic runs on a protocol called UDP, which airlin es easily track and block. Switching to TCP forces the data through port 443—the exact same port used for secure banking and shopping websites. Airlin es almost never block this port because doing so would break the entire internet for everyone on the plane.

The Verdict

Do not waste time changing protocols if you are just trying to get the airlin e’s login page to appear. Stick to turning the VPN off first.

However, if Norton fails to reconnect once you are online, dive into your settings and switch the protocol to Mimic or OpenVPN (TCP) to force a stable connection.

https://www.united.com/en/us/fly/travel-experience/inflight-wifi.html
https://support.southwest.com/helpcenter/s/article/onboard-experience-and-wifi
https://www.alaskaair.com/content/travel-info/flight-experience/inflight-entertainment/faqs

AI sourced content may make mistakes
Welcome to the Norton Community!