ISE 1.1.3 Guest portal (Web redirection) what worked for me !!!

Hello,
this document lead to multiple failure !!!!
http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080ba6514.shtml
This guy really helps !!!
https://www.youtube.com/watch?v=TW2ZJVIZ8bs
See attached screen captures.
ISE documentation, even published by TAC is not reliable.
Bring back the Cisco we liked so much 15 years ago !!!!!

Hello Jan
You can customize the look-and-feel of the end-user portals by uploading your company's logos, background images, or color schemes. These changes apply to the My Devices, Sponsor, and Guest portals, but you can assign different images and colors to the mobile Guest portal.
These settings allow you to change the appearance of the portals without having to upload customized HTML files to the Cisco ISE server. However, if you want to create themes unique to specific Guest portals, you must upload your custom HTML files instead.
Step 1 Choose Administration > Web Portal Management > Settings > General > Portal Theme.
Step 2 Upload the graphics and change the color settings in the Style Settings section to customize the standard portals.
Step 3 Upload the graphics and change the color settings in the Mobile Device Style Settings to customize the Guest mobile portal.
Step 4 Click Save.

Similar Messages

The fix for loading web pages-What works for me.

Ever since I went to Tiger I have had problems with Safari and any other browser while at work on my dsl connection. I knew it was not the connection because my G4 with 9.2.2 would work. At home on cable Tiger worked fine. What I found out is that the router/server combination my ip used were Sisco and for some reason Tiger does not work well with them. I asked a programmer familiar with linux to help me and he gave me some code to type into terminal and guess what it works great!... almost! Every time I start Safari I have to enter the code and all is fine. Here is the code
sudo sysctl -w net.inet.tcp.rfc1323=0
See if it works for you and let me know. You will find terminal in Applications/Utilities just copy the code and paste if you want. I had problems before just getting web sites like ups.com to load or even google search pages to load.

Thanks for the tip... I don't have the problem, but others must!

ISE Guest portal web page customization

Folks,
Excuse me for being ignorant but I'm curious where I can get a "localization support example with sample HTML pages".
This is what I found in the user guide:
"You can customize the Guest portal by uploading HTML pages to Cisco ISE. When you upload customized pages, you are responsible for the appropriate localization support for your deployment. Cisco ISE provides a localization support example with sample HTML pages, which you can use as a guide. ISE provides the ability to upload, store, and render custom internationalized HTML pages"
Let's say the web page that I want to show on the Guest portal has some style sheets (CSS). How am I going to upload it ?

Please review the below link which might be helpful:
http://www.cisco.com/en/US/solutions/collateral/ns340/ns414/ns742/ns744/docs/howto_41_guest_services.pdf
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html

ISE Guest Portal only redirect HTTPS traffic.

I have a wireless deployment consisting of the following:
5760 WLC & ISE 1.2
Am I missing something here
I have 4 similar deployments, and never had these issues:
On Android / Apple devices, the guest portal does not pop up automatically &
On a Windows Laptop only https traffic directs to the guest portal.
Thanx

i think you need to recheck the configuration also check the link for step by step config
http://www.cisco.com/c/en/us/solutions/enterprise/design-zone-security/landing_DesignZone_TrustSec.html

Guest Portal web page load is slow and timesout on occasions

Hi All,
I'm hitting a rather unusual issue with our Guest WLAN users. Firstly let me describe the topology:-
2 x 5508 WLC controllers one Foreign and one Anchor. Mobility tunnel between the two WLC's as the Guest WLAN is on the WLC sitting in the DMZ.
30+ 2702i AP's running in FlexConnect mode for Dot1X WLAN and Central Switching for Guest WLAN.
Cisco ISE 1.3 acting as Radius server and providing Authentication and Authorisation policies.
Dot1x Authentication and Authorisation works fine with Dynamic VLAN assignment based on AD memberships.
The issue is with the Guest WLAN is that from a security perspective we weren't allowed to use the Central Web Authentication using L2 MAC filtering with the L3 Security of None as described in Cisco Document: 115732.
So the Guest WLAN has been set up with no L2 security and the L3 Security of Web Policy with Web Authentication to External Server i.e. Cisco ISE and RADIUS override on the Advanced tab of the Guest WLAN.
So a client connects to the Guest WLAN SSID > receives the DHCP IP address hosted by the Anchor WLC and then one opens a browser types in the URL and the Security message is presented > Continue to this website (not recommended) selected and the process of receiving the Web Redirect Sign On Web page begins and hangs around forever.
Depending on the Client i.e. Apple IPAD the sign on page loads correctly although can be slow to start with but a successful login is completed, but with windows clients and MAC Air books there is an issue with the browser either timing out the page and a retry is necessary or we can't move beyond the following page - https://x.x.x.x:8443/portal /PortalSetup.action?portal=194a5780-5e4e-11e4-b905-005056bf2f0a?switch_url=https://1.1.1.1/login.html&client mac=00:23:4e:86:98:3c&wlan=GUEST&redirect=www.cisco.com/
Any suggestions would be really appreciated with this as it's creating a lot of frustration.
Thanks in advance.
Regards,
Mark

Hi Mark,
Yes Guest Cert will need to be external. Because Guest Users if they have a non-corporate laptop for example will not have your Internal Company Certs installed in their browser (that you loaded onto ISE), so they cannot trust your internal Cert.
If your open Firefox or IE under Options/Security View Certificates you will see a list, if its a Guest you will see well known public Certs like Geotrust, Verisign etc.
For my setup I brought a GeoTrust cert and loaded this into ISE, this way Guests will always Trust the Geostrust ISE cert like https://guest.com for example and the login will appear and be trusted.

ISE 1.2 customizing guest portal

I am having some issues trying to customize colours on the default guest portal in ISE 1.2.
Is there really no way to change the entire page background colour, except going through creating a complete set of html files ?
It seems if i upload a transparent background image for both the banner and the logo, and then change the all the gackground coulour settings, the colour only affects the area where the cisco splash logo is, and not the entire page.
I attached my settings, and how the page looks with those, what i am after is the entire page black, and then white text.

Hello Jan
You can customize the look-and-feel of the end-user portals by uploading your company's logos, background images, or color schemes. These changes apply to the My Devices, Sponsor, and Guest portals, but you can assign different images and colors to the mobile Guest portal.
These settings allow you to change the appearance of the portals without having to upload customized HTML files to the Cisco ISE server. However, if you want to create themes unique to specific Guest portals, you must upload your custom HTML files instead.
Step 1 Choose Administration > Web Portal Management > Settings > General > Portal Theme.
Step 2 Upload the graphics and change the color settings in the Style Settings section to customize the standard portals.
Step 3 Upload the graphics and change the color settings in the Mobile Device Style Settings to customize the Guest mobile portal.
Step 4 Click Save.

ISE 1.1.1 - Guest Portal CWA - No username required, only AUP?

We utilize a guest wireless NET that does not require a username/pass, rather, it only requires acceptance of the AUP. Is it possible to do this from ISE's CWA?
Thanks, -b

Do you have any links to describe these steps in detail? I have time today to build this out and test. At this point, in order to get to the "device registration" portal, I am still required to enter my username and password on the guest portal. I am not sure how to redirect directly to the device registration portal.
Thanks,
-b

ISE 1.3 Sponsored Guest Portal Login Failure

Hello Team,
Ive created a guest account in the sponsor portal for a test guest user, however the state remains in "created" state.
Now when the user tries to log on via the sponsored guest portal the error back is "invalid username or password".
In ISE logs it says :
Overview
Event
5418 Guest Authentication Failed
Username
bnawaz01
Endpoint Id
Endpoint Profile
Authorization Result
Actions
Troubleshoot Authentication
View Diagnostic Messages
Audit Network Device Configuration
View Network Device Configuration
View Server Configuration Changes
-->Authentication Details
Source Timestamp
2014-12-24 08:49:05.551
Received Timestamp
2014-12-24 08:49:05.553
Policy Server
DC1-ISE-DMZ01
Event
5418 Guest Authentication Failed
Failure Reason
Account is not yet active.
Resolution
Root cause
Username
bnawaz01
User Type
GuestUser
Endpoint Id
Endpoint Profile
IP Address
Authentication Identity Store
Guest Users
Identity Group
GuestType_Contractor (default)
Audit Session Id
Authentication Method
PAP_ASCII
Authentication Protocol
PAP_ASCII
Service Type
Network Device
Device Type
Location
NAS IP Address
NAS Port Id
NAS Port Type
Authorization Profile
Posture Status
Security Group
Response Time
Any ideas why this might be, if im doing something wrong and how to fix?
Thank you
Bilal

I have had the same issue, the fault is caused by the time zone in the sponsor groups being set by default to UTC, so if you are in London the accounts wont become available until UTC time. The best practice is to add a local time zone and remove UTC at initial configuration
To resolve this create a new local time zone in Guest Access>Settings>Guest Locations and SSIDs then under Guest Access>Configure>Sponsor Groups amend the time zone properties in each sponsor group
One other problem is if you do not remove this at initial configuration you don't seem to be able to get rid of UTC, not really an issue unless you forget when creating new sponsor groups

Content Search Web Part not work for Office Web Apps

Hi ,
In Content Search Web Part word documents are not able to open in browser,but in document library its working.
Office Web Apps not work in Content search web part
Please help me
Regards
Sachin

Below is the display template to open the document in OWA.
<html xmlns:mso="urn:schemas-microsoft-com:office:office" xmlns:msdt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882">
<head>
<title>AdSpace Picture on top, 3 lines on bottom</title>

</head>
<body>

<script>
$includeLanguageScript(this.url, "~sitecollection/_catalogs/masterpage/Display Templates/Language Files/{Locale}/CustomStrings.js");
</script>

<div id="Item_PictureOnTop">

<div class="top-content-box" id="_#= containerId =#_" data-displaytemplate="ItemPictureOnTop">
<div class="top-content-img" id="_#= pictureContainerId =#_">
<a class="cbs-pictureImgLink" href="_#= $urlHtmlEncode(url) =#_" title="_#= $htmlEncode(line1) =#_" target="_blank" id="_#= pictureLinkId =#_">
_#= pictureMarkup =#_
</a>
</div>
<h3 id="_#= line1Id =#_"><a class="cbs-pictureOnTopLine1Link" target="_blank" href="_#= $urlHtmlEncode(url) =#_" title="_#= $htmlEncode(line1) =#_"
id="_#= line1LinkId =#_"> _#= line1 =#_ </a></h3>
<span class="content-date" title="_#= $htmlEncode(line2) =#_" id="_#= line2Id =#_"><img class="cbs-Thumbnail" src="_#= $urlHtmlEncode(iconURL) =#_"
alt="_#= $htmlEncode(line1.defaultValueRenderer(line1)) =#_" id="_#= pictureId =#_" />_#=line2=#_</span>
</div>
</div>
</body>
</html>
Basically,ctx.CurrentItem.ServerRedirectedURL is calculated by a managed property ServerRedirectedURL which needs to be included in the display template.
Problem solved.
Nehal Bhandari,ATL, Nagarro Softwares

Mozilla-redirect not working for me

I've used the mozilla redirect successfully in NS4 servers, but can't get my SunOne6.1 server to work with same line.
Should the same line work?
NameTrans fn="mozilla-redirect" from="/anything" url="/clickinstantly/index.html"

Found my problem. I nneded to move my mozilla-redirects ABOVE "document-root" and BELOW the "pfx2dir". Once I did that, the redirects starting working. And, sorry about the version umber. It is 6.0 ....Dave
NameTrans fn="pfx2dir" from="/mc-icons" dir="/u3/iplanet/servers/ns-icons" name="es-internal"
NameTrans fn="mozilla-redirect" from="/CLICKINSTANTLY/" url="http://www.polaroid/clickinstantly"
NameTrans fn="mozilla-redirect" from="/dbm" url="/landing/landing.jsp?FOLDER<>folder_id=2534374302023715"
NameTrans fn="mozilla-redirect" from="/us/index.jsp" url="/index.jsp"
NameTrans fn="document-root" root="$docroot"

Web redirect not working on MAC OS X WLC 5508

Hi,
I have a problem with Mac OS X-users. When connecting to the guest-network, the Mac does not get redirected to the login-web.
I have tried to manually type in the url and IP-adress to the login-page, but cannot reach it. It works with all other devices.
Code: 7.6.130.0 Hardware: Cisco 5508
Grateful for any input on the matter.
Regards
Fabian

Is there any guest anchoring in this scenario?
Have you verified that your client is receiving DNS and can do nslookups?
Is this with all MAC users or only a select subset e.g. Yosemite only machines?
What is the virtual IP you are using?

Web site certificates work for 1 user, but not another on same computer: Win7 Ultimate 64 bit

I have a newly built computer with Windows 7 Ultimate 64 bit and I can access web sites from my log on (admin user) with either IE 11 or Foxfire. However, I set up a basic user account for my wife and she keeps getting certificate from untrustworthy source
errors. These are the same sites I have no trouble accessing. How do I fix this? My build is on PCpartpicker, but I can't seem to attach the link.

Hi,
There can be tons of reasons for why certificates don't behave. Please compare installed cert's for the two affected users using mmc
http://msdn.microsoft.com/en-us/library/ms788967(v=vs.110).aspx
//jesper

Mime mapping in web.xml not working for csv/excel

I am using the weblogic 8.1 app server. I want to serve up some static content
from an "exploded" web application (dir structure instead of a war file). This
static content includes html files and csv files that cause the browser to give
an option to the user to open the file in excel or download to disk. I have inserted
the following mapping inside web.xml in the exploded directory structure...
<web-app>
<mime-mapping>
<extension>csv</extension>
<mime-type>application/vnd.ms-excel</mime-type>
</mime-mapping>
</web-app>
I redeployed the "web application". When I try to access a csv file, instead of
giving me the save/open dialog, the browser displays the ASCII contents of the
csv in the browser like an HTML file. Am I missing a step? Is the xml above not
for the functionality that I am trying to implement here?
Thanks.

Hi All:
Thanks for all your help regarding the adfAuthentication success_url. Now I am able to configure to make this work. But now I am facing another issue i.e. I am getting 401 Not authorized message when the success_url is pointed to the jspx page.
Note: I am using custom login module similar to DBProcOraDataSourceLoginModule so my roles are stored in the custom Role class. So I am not sure how to pass this role info to the security in ADF in order to authorize the page to be viewed.
Could you please help and can you point me to any specific link.
Thanks & Regards
Sridhar Doki

Web gallery not working for me.

Hi,
I've done this a lot on my old PC, but, I can't get it to work on my Mac now. I want to create a web gallery of a couple hundred print bannerheads, all EPS files.
I've filled out all the meta data. I've filled in a location, a save location.
But, when I click "save," it tells me that the "save location does not exist."
So, that didn't work. So, I tried making a PDF instead. There it tells me that "there is insufficient disk space to complete this operation." I've got hundreds of gigabytes of disk space.
So, Bridge isn't really doing much for me right now.
Thanks,
Peter

I got a similar problem. I'm trying to use the output feature to create a contact sheet. I get the "insufficient disk space" message also. There are only 3 images that are being included in the operation, all around 3 megs. I have over 290 GB available on my hard drive. I went to Preferences/Cache and used the " compact cache" feature, then restarted the software. Still no luck. I get the same message. How about some help, Adobe?!
Wypie

Web page not working for vi when launched from testsetand

we've setup a web page for a vi in labview (web publishing tool) and its visible in IE until you close labview
this vi is then run from teststand thou the web page isnt being updated?
we need to be able to view the contents of the vi remotely

Hi,
Would it be possible for you to upload either the programs that demonstrate this (if not too large) or quickly create a program and run instructions in order to replicate this behaviour here? Also which versions of TestStand and LabVIEW are you running?
Once I have this extra information and code I will replicate the issue here and look into it further for you,
All the best,
Applications Engineer

ISE 1.1.3 Guest portal (Web redirection) what worked for me !!!

Similar Messages

Maybe you are looking for