Now I can click a link on customize captive portal.
I have a ''user-captive" role which will be returned to user after user connected the SSID. In ''user-captive" role have three firewall policies. There's logon-control, captiveportal and web which be created in order to allow user go to 10.10.1.100. I try move web policy on the top following logon-control and captiveportal. It works!
Could you explain me about that?