PCX-14531

Author: ranbel

src/content/docs/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/captive-portals.mdx

@@ -23,28 +23,21 @@ To allow users to connect through a captive portal, administrators can configure
 
 ## How captive portal detection works
 
-If WARP cannot establish a connection to Cloudflare, it will:
+If WARP cannot establish a connection to Cloudflare, it will send a series of requests to the [Cloudflare captive portal URLs](/cloudflare-one/connections/connect-devices/warp/deployment/firewall/#captive-portal) and other OS and browser-specific captive portal URLs. These requests are sent outside of the WARP tunnel.
 
-1. Temporarily open the [system firewall](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/warp-architecture/#ip-traffic) so that the device can send traffic outside of the WARP tunnel. The firewall only allows the following traffic:
-
-   - HTTP/HTTPS on TCP ports `80`, `443`, `8080`, and `8443`
-   - DNS on UDP port `53`
-
-2. Send a series of requests to the [captive portal test URLs](/cloudflare-one/connections/connect-devices/warp/deployment/firewall/#captive-portal). If the HTTPS request is intercepted, WARP assumes the network is behind a captive portal.
-
-3. Open a browser window with the captive portal login screen if the captive portal sends a redirect HTTP response code (`302`, `303`, `307`, or `308`).
-
-4. Automatically re-enable the firewall after the configured timeout period.
+If the HTTPS request is intercepted, WARP assumes the network is behind a captive portal and fully opens the [system firewall](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/warp-architecture/#ip-traffic). While the firewall is open, all device traffic will bypass WARP. The firewall is automatically re-enabled after the user successfully connects to the portal or after the timeout period expires.
 
 ```mermaid
 flowchart TB
 accTitle: Captive portal detection
 
-
-A[Send DNS request] -- Succeed --> B[Send HTTPS request]-- Fail --> C[Send HTTP request] -- Succeed --> D[Captive portal detected]-- Receive HTTP redirect -->I[Redirect to captive portal login]
-A -- Fail --> F(CF_NO_NETWORK error)
-C -- Fail --> F
-B -- Succeed --> G[No captive portal]--> H[Retry connection to Cloudflare]
+start[Unable to connect to Cloudflare] --> timerstart(Start captive portal timer)
+timerstart-->dns[Send DNS request to captive portal URLs] -- Succeed --> https[Send HTTPS request]-- Fail --> http[Send HTTP request] -- Succeed --> detected{Captive portal detected}-->open[Turn off firewall]
+open--Captive portal timeout expires--> close[Re-enable firewall]
+open--User logs in to captive portal--> close[Re-enable firewall]
+dns -- Fail --> error[CF_NO_NETWORK error]
+http -- Fail --> error
+https -- Succeed --> noportal{No captive portal}--> retry[Retry connection to Cloudflare]
 ```
 
 ## Limitations