ISE 1.1.1 Sponsor Portal - Button "Clear Filter" appeares twice

I think I discovered a Bug with the Button labels when displaying Guest Users in the Sponsor Portal.
When using Internet Explorer (tested 7 and 9) both butons are labeled "Clear Filter".
It apears the same in every language template.
When using Firefox (16.x) everything is ok.
I added a screenshot to make clear which buttons are affected.

FYI
You can access the Cisco ISE administrative  user interface using the following browsers:
•Mozilla Firefox 3.6 (applicable for  Windows, Mac OS X, and Linux-based operating systems)
•Mozilla FireFox 9 (applicable for Windows,  Mac OS X, and Linux-based operating systems)
•Windows Internet Explorer  8
•Windows Internet Explorer 9 (in Internet  Explorer 8 compatibility mode)
Note Cisco ISE GUI is not supported on  Internet Explorer version 8 running in Internet Explorer 7 compatibility mode.  For a collection of known issues regarding Windows Internet Explorer 8, see the  "Known Issues" section of the Release Notes for Cisco Identity Services Engine,  Release 1.1.x

Similar Messages

  • ISE 1.2 corrupted sponsor portal

    Hi,
    since I started to use ISE sponsor portal it showes me wrongly, see attached screenshot.
    I tried various browsers, but the problem is the same. Other pages are okay, just the main with guest users has problem.
    Looks like it happened after upgrade from previous ISE version.
    Does anybody know how to fix this?
    Thanks and greets
    Karel

    Hi Karel,
    As regarding to your query,
    These selections will allow guests to change their password, perform self-service, and require
    acceptance of a default AUP upon login.
    Changed in ISE 1.2: Now that we have the ability to Change Account Duration (discussed later in the lab) the option
    to Require guest and internal users to change password at expiration and first login has been updated so that
    the guest must change the password when not only first logging in but then also when the expired account has been
    reactivated. It’s not being used in this lab so be aware of this option.
    Self-service allows any user to generate access credentials without requiring a sponsor to perform this task.
    As this is not a sponsored user and any user may create their own account with this policy setting, it is
    common to assign self-service guests to an Identity Group with minimal network access privileges such as
    “Internet_Only”.

  • ISE Time Management for Sponsor Portal User

    Hi all,
    I'm currently using ISE version 1.2 and when I create a custom time management for each user, the rule applied to each user is only applied for a maximum 10 days eventhough I configured it for ex.30 days.
    want to check with all of you if anyone have the same issue?
    Firstly I think it's because the purge time is default set for 15 days, but even when I already changed it. The expiration time will still not get over than 10 days.
    Cheers
    Ryan

    Default Guest Time Profiles
    Time profiles provide a way to give different levels of time access to different guest accounts. Sponsors must assign a time profile to a guest when creating an account, but they cannot make changes to the time profiles. However, you can customize them and specify which time profiles can be used by particular sponsor groups. Beginning with Cisco ISE 1.2 time profiles are referred to as the account duration in the Sponsor portal.
    Cisco ISE 1.2 includes these default time profiles, which replace the profiles available previously:
    •DefaultFirstLoginEight—the account is available for 8 hours starting when the guest user first successfully connects to the Guest portal. This replaces the DefaultFirstLogin time profile.
    •DefaultEightHours—the account is available for 8 hours starting when sponsors first create the account. This replaces the DefaultOneHour time profile.
    •DefaultStartEnd—sponsors can specify dates and times on which to start and stop network access.
    If you upgrade to Cisco ISE 1.2, the older time profiles are still available, but you can delete them if you are not using them. If the older time profiles are assigned to a sponsor group, a message alerts you before deleting. If you perform a new installation of Cisco ISE 1.2, only the new time profiles display.

  • ISE 1.1.1 Sponsor Portal - Unable to create First Names with "-"

    Hi!
    Regarding our international subsidiaries there are many names that contain the character "-" (i.e. Pierre-Pascal)
    When trying to create an new Guest Account the ISE refuses it because of an invalid character in the "First Name" field.
    In other formular fields i.e. Email Address - the character "-" is allowed.
    Is it possible to change the rule which checks the fields for illegal characters? (Is it a Bug?)

    ISE 1.1.3  Go to “Web portal mangment” -> Setting -> Username Policy
    You have a field “
    Username may   include the special characters
    Username Policy
    General
    Create   username from email address
    Create   username from first name and last name
    *   Minimum Username Length
    (Valid   Range 1 to 20)
    Random
    * Username may   include the alphabetic characters
    * Minimum   number to include
    (Valid   Range 0 to 20)
    * Username may   include the numeric characters
    (Should   contain only numeric characters)
    * Minimum   number to include
    (Valid   Range 0 to 20)
    * Username may   include the special characters
    * Minimum   number to include
    (Valid   Range 0 to 10)
    Bottom of Form
    This may help you.

  • ISE 1.2 Sponsor portal port change not working

    Hi,
    Has anyone else had an issue where they change the default port number of the sponsor portal on the Admin node, all ISE restart, but the sponsor portal still only works on the default 8443 port?
    Thanks,
    Ct

    Hi,
    As you know that default port is 8443, but you can change this value so ensure that the same value you assign to the switch and it matches the setting in Cisco ISE.

  • Sponsor Portal after upgrade ISE 1.2 - 1.3

    Hi,
    After upgrade ISE to version 1.3 I can't access to Sponsor Portal via ://ISE_IP:8443/sponsorportal/ as it was done in version 1.2 (error: [ 404 ] Sponsor Portal Resource Not Found. The resource requested cannot be found). I have to open it through ISE (Guest Access -> Configure -> Sponsor Portals -> Sponsor Portal (Default) -> Portal test URL). But then in address bar i can see the exact same address i tried to reach (://ISE_IP:8443/sponsorportal/) but it works.
    I deleted migrated portal from version 1.2 and now using only default one. Should I additionally activate it somewhere after this upgrade?

    Nice to hear that. I just want to add something to take into account:
    When you create the CSR directly from ISE, the documentation says for version 1.2 that you need minimum CN field. I did it and then I started having issues with Chrome Browser/ChromeBook which was triggering a certificate warning even though I had signed it with the correct CA Server and I had the Trusted Certificate Authority included in the browser list.
    When I was using 1.1.3, I did not have that problem when using ISE internal CSR feature and only using Common Name (CN) for the CSR.
    I tried using Openssl as usual to create the CSR for ISE running 1.2. Signed and imported it into the ISE and the problem was solved. I am using like you FQDN in the WLC URL Redirect on LWA or CWA with the corresponding entry into the DNS. One important thing I found is that openssl uses some additional fields which I included in the CSR and I think after reviewing the ISE 1.2 documentation we need to include those as well in the ISE CSR feature. Looks like also there is a sequence/order for those fields in the ISE when creating the ISE CSR. The list is the following:
    countryName       = optional
    stateOrProvinceName     = optional
    localityName            = optional
    organizationName  = optional
    organizationalUnitName  = optional
    commonName        = supplied
    emailAddress            = optional
    Finally, with Openssl I could create as well SAN Certificates and I included the IP of the PSN , PAN and MNT ISE's so I would not need the DNS Entry. This feature was added on version 1.2 of the ISE which helps a lot. I will give it a few more testing since that I have a lab deployment with 5 ISE's (PAN, MNT and 3 PSN's).

  • ISE 1.3 Sponsor Portal.

    Hi There, Just trying out ISE Version 1.3 and encountering some issues getting access to the sponsor portal.
    Just checking about a Standalone deployment is it OK to have the sponsor portal interface the same as you manage the ISE from?
    I cant seem to get to the sponsor portal on 8443 it just doesn't display the page. It doesn't even fill out the URL at the end.
    When I fill in the URL for it. I get this.
    The Portal is set up like this So from what I see it should work. If I use the preview button in the portal set up I can get to it fine. Am I missing something?

    Graham,
    I've seen this a few times.  Do you have separate PSNs?  Note that the DNS entry (Alias) for the Sponsor Portal needs to point to a PSN and NOT the Admin Node.  This usually fixes the issue.  Create an alias in DNS for sponsor.domain.com (replace domain.com to reflect your domain name) and point it to a PSN.  Then type sponsor.domain.com into your browser.  The system will redirect to the default Sponsor Portal.
    Note this Capture from the ISE 1.3 Admin Guide:
    The full guide can be found here:
    http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13.pdf
    Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question.  Otherwise, feel free to post follow-up questions.
    Charles Moreton

  • Cisco ISE Guest Sponsor Portal Isssue

    Dear all ,
    We have insatalled 5 ise 3315 boxes IOS 1.0.4 in our network where in two of them are admin node , two of policy services and one is mnt node. We are using guest sponsor portal for wirless guest user where in we have integrated WLC 5508 with ise and using weblogin for guest users.
    We have created open ssid in wlc and using external redirected url of ise for guest login page.
    But when we create any guest user in sponsor login for guest user we faced following issue
    1) When guest user gets conected to wirless and login in to guest portal with credential after putting credential  then its again redirect to same login page
    wihout successful login prompt.
    Can we pompt successful login after guest login to guest portal or redirect to any other link like google.com so guest user will gets to know he is able to access internet now
    2) We have creted time profile 8hours first login for guest user. When guest user gets connected while putting credential in to guest portal.
    But we face issue after approximately every 20 mins guest gets disconnected from internet and guest again gets login page of guest portal and if we put same credential then its working but after approx 20 min interval user get disconnected from internet.
    Can anyone help me to resolved above issue regading cisco ise guest sponsor portal
    Thanks & Regards
    Pranav Gade

    Pranav your answers are inline,
    1) When guest user gets conected to wirless and login in to guest  portal with credential after putting credential  then its again redirect  to same login page
    wihout successful login prompt. When you are using CWA (central web authentication) there is no way we can redirect users using the redirect-url because this will always redirect users for every time they initiate a web request. There is no other coa feature that will remove this condition since they have already been authenticated.  Here is a guide that explains the user experience when using central web auth -
    http://www.cisco.com/en/US/docs/security/ise/1.1.1/user_guide/ise_guest_pol.html#wp1296954
    Can  we pompt successful login after guest login to guest portal or redirect  to any other link like google.com so guest user will gets to know he is  able to access internet now No this is not possible, you can change the verbage and force the AUP to be displayed informing users that they can retry their web request after hitting the accept button.
    Here is the documented experience once users go through the guest process -
    http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080ba6514.shtml#final
    2)  We have creted time profile 8hours first login for guest user. When  guest user gets connected while putting credential in to guest portal.
    But  we face issue after approximately every 20 mins guest gets disconnected  from internet and guest again gets login page of guest portal and if we  put same credential then its working but after approx 20 min interval  user get disconnected from internet. Check the advanced timer on your SSID as you may be hitting the session timeout on the WLC. Please disable this option and let the COA feature in ISE expire user sessions on the controller.
    Thanks,
    Tarik Admani
    *Please rate helpful posts*

  • Cisco ISE sponsor Portal email notification of guest account

    Is there anyway to not have the email button be displayed in the sponsor portal?  We don't have email or SMS enabled and sponsor users are complaining that the button is there but doesn't work, it woul be really good if you could just remove it.  I have looked at the sponsor language template configuration but it doesn't appear to be able to not display the button just rename it?
    any information would be much appreciated.
    Craig

    Martin,
              thank you very much for the information, I don't think I would ever have checked there for this configuration.  It is taking me awhile to get used to the ISE GUI, I don't find it particularly intuitive but hopefully I will get there.
    thanks
    Craig

  • ISE 1.2 patch 3 - Sponsor Portal default timezone changed to non-existant ECT

    Hi everybody,
    We've applied patch3 to our ISE 1.2 cluster and after the upgrade all the sponsor accounts (externally autenticated on Active Directory) now have GMT +01:00 Europe/ECT as default Time Zone. Thus all the guest account created have the same time zone and guest authentication fails.
    This is the error from ise-console.log:
    guest:- com.cisco.cpm.guest.exceptions.PortalUserException: java.lang.IllegalArgumentException: The datetime zone id 'ECT' is not recognised
    guest:-        at com.cisco.cpm.guest.edf.GuestUserAdaptor.isAcctValid(GuestUserAdaptor.java:489)
    I checked the admin interface and the 1.2 documentation but could not find any default setting for sponsor users Time Zone
    Time zone for the 3315 is CET:
      clock timezone CET
    A workaround is to have each sponsor user update its Time Zone setting on the Sponsor Portal, but this is impratical.
    Did anybody experience the same issue?
    Regards,

    Hi Luigi Gangitano,
    From when are you experiencing this issue? I suspect this would have been an issue when the server timezones are changed from CEST timezone to CET timezone.
    To further figure out where exactly the issue is , 
    1.Can you please let us know what is the timezone in the UI on the top most right corner in the server information section is ?
    2.Similarly can you please check the timezone in the CLI of Primary ISE node.
    If the above two locations are displaying correct timezone then we have to suspect with the sponsor portal.

  • ISE 1.2 Sponsor Portal issue

    Hi
    we have an ISE version 1.2 installation and are trying to customise the Sponsor Portal login page to show the Terms and conditions for staff whan accessing the page, by using the display pre-loign banner under the sponsor portal themes settings.
    We have added the text for both pre and post login banners and have selected the check boxes for both but for some reason when saved the text does not display and the check boxes show as being un checked when going back to the page. Is this a bug ?? i have reset to factory defulats and re tried but still not working.. any help would be appreciated

    It may be a browser issue. Please check the supported Operating Systems and Browsers for Sponsor, Guest, and My Devices Portals:
    These Cisco ISE portals support the following operating system and  browser combinations. These portals require that you have cookies  enabled in your web browser.
    Table 8     Supported Operating Systems and Browsers
    Supported Operating System Browser Versions
    Google Android 1 4.0.4, 4.0.3, 4.0, 3.2.1, 3.2, 2.3.6, 2.3.3, 2.2.1, 2.2
    •Native browser
    Apple iOS 6, 5.1, 5.0.1, 5.0
    •Safari 5, 6
    Apple Mac OS X 10.5, 10.6, 10.7, 10.8
    •Mozilla Firefox 3.6, 4, 5, 9
    •Safari 4, 5, 6
    •Google Chrome 11
    Microsoft Windows 82
    •Microsoft IE 10
    Microsoft Windows 73
    •Microsoft IE 9
    •Mozilla Firefox 3.6, 5, 9
    •Google Chrome 11
    Microsoft Windows Vista, Microsoft Windows XP
    •Microsoft IE 6, 7, 8
    •Mozilla Firefox 3.6, 9
    •Google Chrome 5
    Red Hat Enterprise Linux (RHEL) 5
    •Mozilla Firefox 3.6, 4, 5, 9
    •Google Chrome 11
    Ubuntu
    •Mozilla Firefox 3.6, 9

  • ISE 1.2 Sponsor Portal- Account Expiration Date Defaults to same time as Start Date

    We have a time profile setup for ISE Sponspr Portal with Start/End.  I understand this allows the sponsor to specifially set the start and end time for the guest account.  When creating an account, the Start/End time is the same time.  If a Sponsor forgets to set the end time, then the guest account will be created, but will expire not allowing the guest to login.  It would be nice to have the end time default to something other than the start time, like 8 hours default.  Is this possible?  Can the expiration time default to something like 8 hours, but still give the Sponsor the ability to adjust the start/end times if needed?  This is very simple, and I cannot believe this is not available.

    Beginning with Cisco ISE 1.2 time profiles are referred to as the account duration in the Sponsor portal.
    Cisco ISE 1.2 includes these default time profiles, which replace the profiles available previously:
    DefaultFirstLoginEight—the account is available for 8 hours starting when the guest user first successfully connects to the Guest portal. This replaces the DefaultFirstLogin time profile.
    DefaultEightHours—the account is available for 8 hours starting when sponsors first create the account. This replaces the DefaultOneHour time profile.
    DefaultStartEnd—sponsors can specify dates and times on which to start and stop network access.
    Upon expiration of their account per their assigned time profile, they will no longer be able to login or access the company network.
    If a guest were to return to the network, the sponsor can change the account duration via the sponsor portal to grant them access again and then require them to change their password if deemed necessary (depending on the settings). Changing account duration can be used for extending a guest users access longer than the original setup.
    If you upgrade to Cisco ISE 1.2, the older time profiles are still available, but you can delete them if you are not using them. If the older time profiles are assigned to a sponsor group, a message alerts you before deleting. If you perform a new installation of Cisco ISE 1.2, only the new time profiles display.

  • ISE 1.2 sponsor portal - disabling default languages

    Hi,
    We are implementing Cisco ISE 1.2 and have a question on the sponsor portal languages.
    The client company's official language is English and so we would like to disable all other languages from the sponsor portal. If we don't do it, the users might select their native language (on the sponsor settings and/or the guest notification language) meaning that we have to customize and maintain all 15 language templates.
    It has alread happened during the tests: a sponsor created a guest account and choose a notification language other than English - the SMS was not sent because the "Destination" on the "SMS text message notification" default value is "[email protected]".
    Thanks in advance.
    Regards,
    Telmo Oliveira

    Hi all,
    This reply to myself is done for documentation proposes, it can help someone with the same challenge.
    Today I was at an event at Cisco where ISE 1.3 beta was presented. This version will have already the option to choose between browser locale or static language template. Talking to the Cisco eng. responsible for the presentation, he told me that 1.2 had no way to do it.
    Cisco ISE 1.3 is now planned to be release end of 2014.
    Regards,
    Telmo Oliveira

  • ISE 1.1 sponsor portal different type of guest accounts

    Hi there
    I just played around with the ISE 1.1.2.145 sponsor portal. I have the following 3 requirements, but I don't see a way the get there with the actuals sponsor portal features:
    1. I would like to create a event user (one single user for multiple logins) with a given username and a given password
    2. I would like to create a single user with a given username and a given password
    3. How can I change the password of such a user
    At the moment I am a little disappointed from the sponsor portal, there are not that features or I can't see the way to get there ;-)
    Can anybody confirm the above problems?
    Best regards
    Dominic

    It is possible to use internal users as well as AD users for admin.
    I'm not actually sure whetehr it's possible to stop using Internal Users.
    I have it working using both, primarily as I don't have AD credentials on customer site, so they use AD credentials and I stick to using Internal Admin User.
    I still haven't understood your original question entirely, but if you select the guest username to be created based on email address (rather than first name/last name), then you can create a single username using a fictional email address, and allow the user to change the password on first login. You can then change the password to whatever you want.
    Does that fit?

  • ISE 1.3 Sponsor Portal problem

    Hello Guys,
    I configured one Guest WLAN to authenticate via ISE Web Portal.
    The wlan, the redirect, everything is working fine. Y
    Yesterday i created one user and password using the sponsor portal normally, but today, i tried to connect on the sponsor page and i got the error:
    Sponsor Portal Internal Error
    Please contact System Administrator. If you are the System Administrator please consult the logs.
    I tried to restart the application ise via cli but didin't works.
    Can you help me? Where these logs are located?
    Thank you.

    Look at you Rafael, coming up with problems and solving them yourself! :) Thanks for sharing the solution with everyone (+5 from me). Let's close the thread if the issue is resolved :)

Maybe you are looking for