What's new 
I’m trying to open a web application on an Android tablet that is locked in kiosk mode using Hexnode. When I launch the web app, Hexnode Kiosk Browser displays: “Forbidden, your administrator has blocked access to: <URL>”. The web app is already added to the kiosk setup, but it looks like the browser is blocking something when the page loads. Is there a specific setting for allowing the login page or redirects for web apps in Android kiosk mode?
21 Views
Replies (2)
Marked SolutionPending Review
Hexnode Expert
21 hours ago
Sep 03, 2026
Marked SolutionPending Review
This usually happens when the Android device is using Hexnode Kiosk Browser and the active kiosk policy allows access only to explicitly whitelisted websites. Even if the main web app URL is added, the app may still load additional login, authentication, or redirect URLs. If those URLs are not included in the whitelist, Hexnode Kiosk Browser blocks them and shows the “Forbidden” message.
To resolve this:
- Open the Hexnode portal and go to Policies.
- Select the kiosk policy associated with the Android tablet.
- Navigate to Kiosk Lockdown > Android Kiosk Lockdown > Website Kiosk Settings.
- Under Allowlist Websites, add the main web app URL.
- Also add any related login, authentication, or redirect URLs used by the web app.
- Save the policy.
- Go to Manage > Devices, select the tablet, and run Actions > Scan Device to force a policy sync.
After the updated policy reaches the device, reopen the web app in kiosk mode and check whether the login flow loads correctly.
Marked SolutionPending Review
Participant
13 hours ago
Sep 03, 2026
Marked SolutionPending Review
That makes sense. I had only added the main web app URL and didn’t realize the login/redirect URL also had to be allowed. I updated the Website Kiosk Settings and ran Scan Device to push the policy.
Save