Logo in Guest Email Notification(Cisco ISE sponsorportal)

Hello Everyone,
I have some questions regarding ( via Cisco ISE sponsore portal) Guest email notification:
Right now we have this kind of structure for Guest email notification:
Welcome to the XYZ Guest Portal.
Your guest account details:
Username: aefgh
Password: 4Z7Pk
Valid From: Mon Sep 30 10:15:45 CEST 2013
Valid To: Mon Sep 30 18:15:45 CEST 2013
Thanks
Now I want to add my company logo in this notification.(Email as well as in print format).
Can anybody help me to solve this.
Thanks

Please check the below link this may can be helpful for you:
Link-1
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html

Similar Messages

ISE Guest Email Notification (Guest account creation)

When a guest user creates an account in ISE, it sends a system generated email with the username/password. It says "Welcome to the Guest Portal, your username ise xxx and password is yyy." Is there anywhere in ISE (1.2) to change this text, especially the name 'Guest Portal'? I thought it was in language templates > Configure Miscellaneous Items > Portal Name. But I changed this to the portal name, and it was not reflected in the email. Thanks.

Josh,
Right now, it's pretty limited. Here is the template to be used for formatting the email notifications:
E-Mail Notification Template
The following is an example of the login information for the body of an e-mail in an English language template:
Welcome to the Guest Portal, your username is $username$ and password is $password$
The $username$ and $password$ strings will be replaced with the username and password values from the Guest User account.
In the e-mail body, you can use special variables to provide the details for the created guest account. When using these variables, you must use all uppercase or all lowercase letters, and you cannot mix them. For example, the string for username can be either $USERNAME$ or $username%, but it cannot be $UserName$.
You can use these variables in the e-mail notification template:
•$USERNAME$ = The username created for the guest.
•$PASSWORD$ = The password created for the guest.
•$STARTTIME$ = The time from which the guest account will be valid.
•$ENDTIME$ = The time at which the guest account will expire.
•$FIRSTNAME$ = The first name of the guest.
•$LASTNAME$ = The last name of the guest.
•$EMAIL$ = The e-mail address of the guest.
•$TIMEZONE$ = The time zone of the user.
•$MOBILENUMBER$ = The mobile number of the guest.
•$OPTION1$ = Optional field for editing.
•$OPTION2$ = Optional field for editing.
•$OPTION3$ = Optional field for editing.
•$OPTION4$ = Optional field for editing.
•$OPTION5$ = Optional field for editing.
•$DURATION$ = Duration of time for which the account will be valid.
•$RESTRICTEDWINDOW$ = The time window during which the guest is not allowed to log in.
•$TIMEPROFILE$ = The name of the time profile assigned.
This dicument is found here:
http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_custom_portals.html#wp1015657
ISE v1.3 should have some improvements and quite possibly some HTML tags.
Charles Moreton

Approve guest account in Cisco ISE 1.3

Hello everybody,
I can't approve guest account in the cisco ISE after I create them. when I want to approve an account I should write a sponsor email, but always I had the same problem: the values entered are incorrect. (Les valeurs saisies sont incorrectes.)
PS:I don't have problem in mail server
Best regards,
ADDOULI Mohamed Ilias

check if you have entered the sponsor email address here who is supposed to approved the guest

Guest Activity on Cisco ISE

Is it possible to monitor the web pages visited for a guest using cisco ISE?

Hi Gino,
Yes, you can use the Guest Activity option. The Guest Activity report provides details about the websites that guest users are visiting. You can use this report for security auditing purposes to demonstrate when guest users accessed the network and what they did on it.
This report is available at: Operations > Reports > Endpoints and Users > Guest Activity.
To use this report you must first:
•Enable the passed authentications logging category. Choose Administration > Logging > Logging Categories and select Passed authentications.
•Enable these options on the firewall used for guest traffic:
–Inspect HTTP traffic and send data to Cisco ISE Monitoring node. Cisco ISE only requires the the IP address and accessed URL for the Guest Activity report so, if possible, limit the data to include just this information.
–Send syslogs to Cisco ISE Monitoring node
Please check the below link for further information,
http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_guest_pol.html#wp1056645

Permit only one access per user on guest portal Cisco ISE

Hi,
Could you please help me to figure it out if it´s possible to create a guest account on cisco ISE which permit only one concurrent access?
We don't want to have multiple devices registering with the same account, just one different account for each device.
Thanks,

Hi Gino,
You can restrict guests to having only one device connected to the network at a time. When guests attempt to connect with a second device, the currently-connected device is automatically disconnected from the network.
This is a global setting affecting all Guest portals.
Step 1 Choose Administration > Web Portal Management > Settings > Guest > Portal Policy.
Step 2 Check the Allow only one guest session per user option.
Step 3 Click Save.

Problem in Sending image in Email Notification

Hi All,
In our implementation we have to send customer logo in each email notification.
We have SIM 7.1 deployed on SUN JES Application server 8.2.
I tried to send the image using two ways but nothing got succeed.
1) Using <IMG src"http<machine name>:<port number>/idm/images/<image name>"/>
2) Deployed another trial.war file having only image folder and then using <IMG src"http<machine name>:<port number>/trial/images/<image name>"/>
Where "machine name", "port number" and "image name" have suggestive values as per our environment.
But i am not able to send the image. however second options works well with Tomcat.
If anybody has any prior experience or some idea please share. it will really be helpful for us.

Hi all,
Its done.
Actually there is some issue related with the intranet (may be they are blocking the image to get diaplayed) as its working for gmail and all.
Thanks

Cisco ISE maillog

Hi, I found some strange entries in ISE's system logs, using this command: show logging system maillog.
Unfortunately I wasn't able to find out what this means. Does anyone has an idea why this happens and which setting causes this? I see this entries for almost every hour.
2014-09-01T08:01:01.731301+02:00 ISE's HOSTNAME sendmail[791]: s81611u6000791: from=root, size=511, class=0, nrcpts=1, msgid=<201409010601.s81611u6000791@ISE's HOSTNAME>, relay=root@localhost
2014-09-01T08:01:01.739384+02:00 ISE's HOSTNAME sendmail[791]: s81611u6000791: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30511, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused
Thanks!
KR

Hi Renata,
Kindly check if the email configured to receive notifications from ISE is capable of receiving email notifications.
ISE should provide a global option to configure the source address for scheduled report notification emails.
When ISE is configured for an email notification to be sent when a scheduled report is generated, the source email address of the report notification mail is always "root@<ise_hostname>"
If the production email servers reject such source email address, you get these error logs.
However, you can create exceptions on the email server to allow the source address.
Regards
Salma

I want to integrate SMS gateway to Cisco ISE 1.2 and my question is SMS notifications are supported for Guest self−registration

I want to integrate SMS gateway to Cisco ISE 1.2 and my question is
SMS notifications are supported for Guest self−registration Services ? or it should be done by Sponsor

I'm not sure I understand the question. Do you want to log in to the Sponsor Portal using AD credentials?
Create an Identity Source Sequence using AD as an Authentication Source. Go to Administration > Identity Management > Identity Source Sequences. Either Edit or +Add a Sequence and choose from the Authentication Sources shown.
Then choose that Identity Source Sequence by going to Administration > Web Portal Management > Settings. Double-click Sponsor from the Left Menu and click Authentication Source. Choose the Identity Source Sequence. Click Save.
I hope this helps.
Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question. Otherwise, feel free to post follow-up questions.
Charles Moreton

ISE failed to send Guest Email. Internal Error

I'm having problems to send email when I create guest accounts. ISE reports "Internal Error encountered. Please contact administrator or help desk"
How can I troubleshoot, what is going on?
I'm running version 1.1.2.145
Thanks in advance
Daniel Escalante

Check your SMTP Server Settings for Email Notifications
To set the SMTP server, complete the following steps:
Step 1 From the Cisco ISE Administrator interface, choose Administration > System > Settings > SMTP Server. The SMTP Server Settings page appears.
Step 2 In the SMTP Server field, type the host name of the outbound SMTP server to which you need to deliver email. For the email notification to function appropriately, the SMTP host server must be accessible from the Cisco ISE server. The maximum length for this field is 60 characters.
Step 3 Choose the Enable Notifications option to enable mail functionality globally.
Step 4 Choose Use email address from Sponsor, to send guest notification email from the email address of the sponsor.
Step 5 If you want to specify a different email address, choose Use Default email address and type the email address from which you want guest notification emails to be sent (for example, [email protected]).
Step 6 Click Save.

ISE 1.3 Sponsored "Known Guest" emailing credentials issue

Just ran into an issue with ISE 1.3 email notifications and was hoping that I might have overlooked a setting.
Basically if I create a self-registered guest ISE will send an email to both the listed sponsor and a confirmation email to the guest with credentials – this works fine. Furthermore I can go to the sponsor portal and click the self registered user then resend the credentials – this also works.
My problem is when I create a "known guest" user from the sponsor portal. Basically I create the account and hit the notify button, select email and click ok – ISE then throws an error saying unable to send email. I click the user and click resend and likewise I cannot send an email.
So in summary email notifications work for self registered guest type but not a known guest type.

Fixed the issue. I did some debugging and looking through logs and found that there is a bug. Basically you need to enable the sponsor to select the language dictionary for email notifications and it fixes the issue.
It is under the customisation section of the relevant sponsor portal under settings of known guest

Cisco ISE 1.2 - BYOD Guest Access Error with Certificate

Hi all !
I'm running on Cisco ISE 1.2. I'm trying to setup BYOD (dual SSID).
Here's a walkthrough of what's happening:
1. I connect to open SSID, enter username/password and register MAC
2. I download WinSPwizard, get trust root CA but WinSPwizard error
This is spwprofilelog
[Wed Oct 01 11:27:17 2014] Installed [pvgas-DC-CA, hash: d0 ad c2 1e 19 b0 8b 61 8a 2d 81 88 da 8a a2 ca
da d3 ab e8
] as rootCA
[Wed Oct 01 11:27:17 2014] Warning - [HTTPConnection] InternetOpen() failed with code: [12038]
[Wed Oct 01 11:27:17 2014] Warning - [HTTPConnection] Abort the HTTP connection due to invalid certificate CN
[Wed Oct 01 11:27:17 2014] HttpWrapper::SendScepRequest - Retrying: [1] time, after: [4] secs , Error: [2]
[Wed Oct 01 11:27:21 2014] Warning - [HTTPConnection] InternetOpen() failed with code: [12038]
[Wed Oct 01 11:27:21 2014] Warning - [HTTPConnection] Abort the HTTP connection due to invalid certificate CN
[Wed Oct 01 11:27:21 2014] HttpWrapper::SendScepRequest - Retrying: [2] time, after: [4] secs , Error: [2]
[Wed Oct 01 11:27:25 2014] Warning - [HTTPConnection] InternetOpen() failed with code: [12038]
[Wed Oct 01 11:27:25 2014] Warning - [HTTPConnection] Abort the HTTP connection due to invalid certificate CN
[Wed Oct 01 11:27:25 2014] HttpWrapper::SendScepRequest - Retrying: [3] time, after: [4] secs , Error: [2]
[Wed Oct 01 11:27:29 2014] Warning - [HTTPConnection] InternetOpen() failed with code: [12038]
[Wed Oct 01 11:27:29 2014] Warning - [HTTPConnection] Abort the HTTP connection due to invalid certificate CN
[Wed Oct 01 11:27:29 2014] Failed to get certificate from server - Error: [2]
[Wed Oct 01 11:27:29 2014] Failed to generate scep request. Error code:
[Wed Oct 01 11:27:29 2014] ApplyCert - End...
[Wed Oct 01 11:27:29 2014] Failed to configure the device.
[Wed Oct 01 11:27:29 2014] ApplyProfile - End...
[Wed Oct 01 11:27:32 2014] Cleaning up profile xml: success
This is SCEP RA profiles
Other Cert
ACL On WLC
and policy
Please help me fix error.
Thanks.

you could create an ISE local user with a GUEST membership and provided you have your ISE password policy set so that it doesn't expire accounts, etc it would be a "permanent" guest account. we do something similiar. sponsors make temporary accounts while long-term or test guest accounts are created in the ise local identity store as guests and are processed the same way. you just have to ensure that the internal user store is part of your guest identity source sequence.

Cisco ISE Guest Portal - DNS Issue - External Zone

Hello,
I have a customer that has the following sceanrio :
In a wireless deployment and a Cisco ISE 1.1.3 deployment with CWA, when the wireless guest receives the redictect URL from ISE (URL to access the ISE Guest Portal), this URL is based on the ISE DNS name, not on its IP address; so, the PC can't resolve this via DNS name since there is no DNS in the External zone (for guets) or by using the ISP DNS servers addresses provided by the DHCP server, and, so, it can't access the Guest Portal at all ;
I know that in trying to manually code the IP address - this does not work (ie in the CWA Authorization profile, the equivalent URL redirect via the CISCO av-pair as follows :
cisco-av-pair=url-redirect=https://10.10.10.10:8443/guestportal/gateway?sessionId=sessionIdValue&action=cwa, )
since the sessionIdValue variable is not replaced by its real value when sent to the wireless client)
My question is : Has this issue been addressed in version Cisco ISE 1.2 - has anyone tried it if has been addressed? If not in Cisco 1.2 - does anyone know iof this feature will become available?
Thank-you in advance for your replies.
Robert C.

Robert,
Manual assignment has been made available in ISE 1.2 release.
M.

Cisco ISE - cannot reach Guest Portal

Hi all,
I have a Cisco ISE server, which is installed on a VMWare plattform. On the ISE server, I configured 2 network cards. One for the Corporate network ( Gigabit Ethernet 0) and one for the Guests (Gigabit Ethernet 1). Because I had problems, I put a client into the Guest VLAN (Wired) and tried to access the guest portal which was not working.
I recognized that the port 8443 for the guest portal is blocked. But I was able to ping the address, and the port 443 and 22 are open as well. On the Gigabit Ethernet 0 network everything works.
All interfaces are activated at the Web Portal Management Settings, for the ports 8443 and 8444.
Anybody an idea??
T&R
Frank

Please use the below ISE- guest URL redirection tshoot doc. below
http://www.cisco.com/en/US/docs/security/ise/1.2/troubleshooting_guide/ise_tsg.html

Cisco ISE guest portal redirect not working after successful authentiation and URL redirect.

Hi to all,
I am having difficulties with an ISE deployment which I am scratching my head over and can't fathom out why this isn't working.
I have an ISE 3315 doing a captive webportal for my guest users who are on an SSID. The users are successfully redirected by the WLC to the following URL:https://x.x.x.x:8443/guestportal/Login.action?portalname=XXX_Guest_Portal
Now when the user passes through the user authentication splash screen they get redirected to https://x.x.x.x:8443/guestportal/guest/redir.html and recieve the following error:
Error: Resource not found.
Resource: /guestportal/
Does anyone have any ideas why the portal is doing this?
Thanks
Paul

Hello,
As you are not able to get the guest portal, then you need to assure the following things:-
1) Ensure that the two Cisco av-pairs that are configured on the authorization profile should exactly match the example below. (Note: Do not replace the "IP" with the actual Cisco ISE IP address.)
–url-redirect=https://ip:8443/guestportal/gateway?...lue&action=cpp
–url-redirect-acl=ACL-WEBAUTH-REDIRECT (ensure that this ACL is also defined on the access switch)
2) Ensure that the URL redirection portion of the ACL have been applied to the session by entering the show epm session ip command on the switch. (Where the session IP is the IP address that is passed to the client machine by the DHCP server.)
Admission feature : DOT1X
AAA Policies : #ACSACL#-IP-Limitedaccess-4cb2976e
URL Redirect ACL : ACL-WEBAUTH-REDIRECT
URL Redirect :
https://node250.cisco.com:8443/guestportal/gateway?sessionId=0A000A72
0000A45A2444BFC2&action=cpp
3) Ensure that the preposture assessment DACL that is enforced from the Cisco ISE authorization profile contains the following command lines:
remark Allow DHCP
permit udp any eq bootpc any eq bootps
remark Allow DNS
permit udp any any eq domain
remark ping
permit icmp any any
permit tcp any host 80.0.80.2 eq 443 --> This is for URL redirect
permit tcp any host 80.0.80.2 eq www --> Provides access to internet
permit tcp any host 80.0.80.2 eq 8443 --> This is for guest portal
port
permit tcp any host 80.0.80.2 eq 8905 --> This is for posture
communication between NAC agent and ISE (Swiss ports)
permit udp any host 80.0.80.2 eq 8905 --> This is for posture
communication between NAC agent and ISE (Swiss ports)
permit udp any host 80.0.80.2 eq 8906 --> This is for posture
communication between NAC agent and ISE (Swiss ports)
deny ip any any
Note:- Ensure that the above URL Redirect has the proper Cisco ISE FQDN.
4) Ensure that the ACL with the name "ACL-WEBAUTH_REDIRECT" exists on the switch as follows:
ip access-list extended ACL-WEBAUTH-REDIRECT
deny ip any host 80.0.80.2
permit ip any any
5) Ensure that the http and https servers are running on the switch:
ip http server
ip http secure-server
6) Ensure that, if the client machine employs any kind of personal firewall, it is disabled.
7) Ensure that the client machine browser is not configured to use any proxies.
8) Verify connectivity between the client machine and the Cisco ISE IP address.
9) If Cisco ISE is deployed in a distributed environment, make sure that the client machines are aware of the Policy Service ISE node FQDN.
10) Ensure that the Cisco ISE FQDN is resolved and reachable from the client machine.
11) Or you need to do re-image again.

Guest Wireless Cisco ISE 1.3

I am setting up guest wireless in my enterprise using Cisco ISE 1.3.
I have set up Authorization profiles and Authentication conditions for Guest Wireless. I am however not sure of the Authentication results (the allowed protocol section). Since I want to give Guests INTERNET-ONLY access, I have configured WLC with a ACL and tied that ACL-name to ISE. However, when it comes to Authentication results à Allowed protocols, I am unsure of what to include. For instance, I have created an allowed protocol named ‘Wireless_Access’, screenshot attached below..
Please let me know what options have to be checked to suit a guest environment. Any help would be much appreciated.. thanks!

Hi,
Below you can find a configuration example for guest access using ISE1.3.
http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html
Hope this helps.
Regards

Logo in Guest Email Notification(Cisco ISE sponsorportal)

Similar Messages

Maybe you are looking for