In Microsoft Edge on Windows 10, access to HTTP (non‑HTTPS) devices on a private network can be affected by the Local Network Access feature and related enterprise policies. To allow access to an internal NAS web interface over HTTP on the local network, adjust Edge’s Local Network Access behavior and, if managed, check that no blocking policies are applied.
- Enable Local Network Access checks and allow prompts
- In Edge, go to
edge://flags/#local-network-access-check.
- Set Local Network Access Checks to Enabled (not Enabled (Blocking)).
- Select Restart in the lower-right corner.
- After restart, open Settings and more (⋯) > Settings.
- Go to Privacy, search, and services > Site permissions > All permissions.
- Scroll to Local network access.
- Turn on Ask before accessing (recommended).
- When browsing to the NAS HTTP URL, allow the prompt so the site can reach local devices.
- If the device is managed by an organization, verify Edge policies
On managed PCs, administrators can centrally block or allow Local Network Access for specific public sites. If a policy is blocking access, it must be changed by the admin. Relevant policies:
- LocalNetworkBlockedForUrls – blocks sites from making network requests to local network endpoints.
- LocalNetworkAccessBlockedForUrls – blocks sites from issuing Local Network Access requests.
- LocalNetworkAccessAllowedForUrls – allows sites to make network requests to local devices and local network endpoints.
On Windows, these are configured via Group Policy or registry:
- Group Policy paths (for admins):
- LocalNetworkBlockedForUrls:
Administrative Templates/Microsoft Edge/Local Network Access settings
- LocalNetworkAccessBlockedForUrls:
Administrative Templates/Microsoft Edge/Network settings
- LocalNetworkAccessAllowedForUrls:
Administrative Templates/Microsoft Edge/Network settings
- Registry locations (for admins):
-
SOFTWARE\Policies\Microsoft\Edge\LocalNetworkBlockedForUrls
-
SOFTWARE\Policies\Microsoft\Edge\LocalNetworkAccessBlockedForUrls
-
SOFTWARE\Policies\Microsoft\Edge\LocalNetworkAccessAllowedForUrls
If a wildcard like * or a pattern matching the site that is used to reach the NAS is present under a BlockedForUrls key, that origin will be prevented from accessing local network endpoints. Removing or adjusting that entry, or adding the origin to LocalNetworkAccessAllowedForUrls, will permit access according to the precedence rules:
- LocalNetworkBlockedForUrls
- LocalNetworkAllowedForUrls
- LoopbackNetworkAccessBlockedForUrls
- LoopbackNetworkAccessAllowedForUrls
- LocalNetworkAccessBlockedForUrls
- LocalNetworkAccessAllowedForUrls
For origins not covered by these policies, the user’s own Local Network Access configuration (step 1) applies.
Once Local Network Access is set to prompt/allow and no blocking enterprise policy applies to the origin used to reach the NAS, Edge will no longer block HTTP access to that device on the private network.
References: