ISE PUA 1.2 Mobile Portal

Similar Questions

• Change the URL redirection in Cisco ISE 2.1.0 comments Portal CWA

  Hello

  I've set up a guest Portal CWA with WLC 5508 8.0.133.0 and ISE 2.1.0.

  I did all the rules both Authenticatin and authorization, and I also see customers hit the rules of law. The rule of being redirects the client to a captive portal in ISE like this: cisco-av-pair = redirect url =https://ip:port/Portal/Gateway? sessionId = SessionIdValue & Portal = d30c7eb0...

  I have 3 different customer portals for each SSID and everything works fine.

  The problem is that, when the wireless client receives the URL ISE redictect (URL to access the portal of ISE comments), this URL is based on ISE DNS name, not on its IP address. My ISE FULL domain name is iselab01.example.local and the certificate indicating that the portal comments field is example.local.

  Now I was asked to create a new portal of comments but this time I have the certificate belongs to the domain example.org and need to redirect to this new portal comments use this new domain.

  I tried to code, in the authorization profile CWA, redirection to equivalent URL through the CISCO av pair as follows:

  Cisco-av-pair = redirect url =https://iselab01.example.org:8443/Portal/Gateway? sessionId = SessionIdValu...

  but it does not work, since the sessionIdValue is not replaced with its actual value when sending to the wireless client.

  Is it possible to change the URL for redirection of ISE somewhere just for a portal of comments?

  Best regards

  Simply use the automatic CWA parameter in the authz profile, rather than enter the cisco-av-pair yourself, you will find that you can change the part of the FQDN of the url, if the session ID is kept intact.

• ISE 1.1.1 - reviews Portal CWA - no required user name, only PUA?

  We use a guest wireless NET that does not require a name of user/pass, on the contrary, it requires only acceptance of the AUP. Is it possible to do it from the ISE CWA?

  Thanks, b

  Brian,

  You can do it with the peripheral authentication of registration portal. You must create and define a group of endpoint for the devices to be assigned statically. It is the only solution.

  Thank you

  Tarik Admani
  * Please note the useful messages *.

• ISE Sponsor 1.4 Customer Portal accounts

  I managed to create self-employment ISE 1.4 for a customer. About 80% finished, but having a headache with the portal of Sponsor,

  Where to create the accounts invited locally? I only need 2, I can see the management of accounts under the access as a guest, but I get a page not as Im that remotely manage, where is the URL for receiving access to create accounts?

  Under Sponsor groups, there are 3 default groups (no idea how you can have 3 as default account!)

  I want just a URL, where someone can create accounts invited, really stupid that you can create on the ISE itself...

  You actually hit the rule of law for the sequence of comments authentication.

  Check the report and search for authentication rule hit.

• ISE according to the time portal comments

  G ' Day all,

  Could anyone advise if it is possible to extend or change the time profile of a guest account that has already been created? I'm trying to understand the use of time within the portal of Sponsor profiles. Imagine that a guest user has an account that gives them access to 2 weeks, by the end of the 2 weeks that the user requires another week of access.

  Of what I see as the time ISE profile page in the Developer Portal and config, is the user would have to wait before the expiry of the existing account and have a new account created or a new account must be created to grant additional access and the existing account could be deleted, I'm looking just for clarification if an extension of time for guest accounts is possible before the end of the account.

  Currently using ISE 1.1.3

  Thanks to the advanced guys.

  James.

  Hello

  Yes, I have increased the TAC issue and they notified me that the current version of ISE does not support guest accounts online updates, as the time profile sets the expiration date and then is not editable after that.

  Thank you

  Dave

• iOS 8.0 our apple and ISE of CISCO [RESOLVED] custom portal users

  Hi guys,.
  I was wondering why after updating to iOS 8.0 our apple users, cannot
  go to the online portal ISE, we do em to connect via a WLC wich
  redirects web-auth, to ISE (radius server) process

  So what if we use the internal portal (Note2) wlc 5508 process all right
  After the update to 8.0 apple IOS devices cannot reach our custom portal
  None...

  everyone has experienced the same?

  BR

  Eugenio

  Glad that you got this work and good work on the search for a solution to your problem (+ 5 from me). Also, thank you for taking the time to come back and share it.

  If your problem is resolved, you must mark the thread as "Answered" :)

  One thing to consider too is CWA (Central Web Auth) instead of what you are doing is LWA (Local Web Auth). It's always better to CWA, there are many benefits to it.

  Thank you for evaluating useful messages!

• ISE PUA personalized for wireless comments

  Hi all

  I am trying to Setup wireless using Cisco ISE for the first time invited.  Under Configurations multi-portail, I was hoping to change the DefaultGuestPortal profile so that I could change the wording of the Blurb of Cisco's AUP.  Can someone point me in the direction where I can do this?  The only solution I see is to create a new portal from scratch.

  See you soon

  Brian

  Hi Brian,.

  If you only wan't to change the AUP, there is no need to create custom portals, the text on the page of the aup, don't figure withen the language model you use, if you navigate to the Administration/Web portal management/settings and look under patterns Portal/language of the comments, you should find one called "set up acceptable use policy" and all other customizable text in the portal of comments.

  

• Question of ISE

  In ISE, server for comments, a second NETWORK card interface can be used to physically connect the comments interface to a DMZ?  If so, can you give a link?

  Comments running on another interface has not been tested so

  is not officially supported.  You will have the best chance running

  Comments on Gig1 and your collection of profiling probes on Gig2 or Gig3.

  Another problem with mobile portal of comments to a second interface

  is that there is currently no option to set a separate management and

  certificate of comments.  Management certificate should not be

  generated the hostname of the ISE.  This means that you must have

  your users in the DMZ Gets a DNS response for the internal and gig1

  subnets Gets a DNS response from gig0 for the same host name.  I think

  This is the main reason that we do not move the portal comments out of

  gig0 at the moment.

• Cisco Ise 1.3 with Flex to connect wireless supported function

  Hello

  My environment is formed ROUND of flex-mode connection wireless and cisco Ise 1.3, these features are supported?
  Basic functions of the AAA
  profiling
  posturing
  Substitution VLAN
  Substitution of the ACL
  Comments commissioning

  TrustSec 2.0 this MDC is not supported? someone try this feature?

  These all work with ISE 1.3 and FlexConnect WLAN.

  You need the right license ISE - the type of mobility (wireless) license will cover everything. If you have wired and wireless, then you must have basic (for most features) + more (for profiling) + Apex (for Posturing).

• Satellite Pro A60: The AC adapter connector pin broke

  The pin of the connector in the hole of mobile portal has broken and is now inside the head of the adapter cable. Does anyone know if it is possible to get the laptop repaired? As is alternative possible that I can charge the battery of the laptop, so that I can use the laptop as running only on battery?

  Hi Lyn,

  It is a common failure on this type of connector. The good news is that it is repairable, the bad news is that it usually involves the replacement of the main card that is not a cheap option.

  You may be able to find a repairman who can just weld on a new socket, but when I had mine repaired last year I just got used "sorry, but we can't get the parts ' response of repairers as I approached.

  I suggest you approach a Toshiba authorized Service partner and ask for a quote for repair.

  Kind regards

• cloud from Acer connection issues.

  Hi all

  I have acer cloud installed on my laptop (aspire E1 - 531) and it runs successfully. I recently bought a Tablet (an asus notebook HD7) and installed the acer cloud app and other applications associated with this topic. I connected the acer on the shelf cloud and logged successfully by using the acer on the mobile portal.

  Everything was fine for the first few days. I could download and upload documents and photos of the tablet on cloud of acer. Then, for some reason, I couldn't connect to the cloud from acer on my tablet, I entered in my ID and password but the connection was not made. I checked the portal on my laptop acer, and filed him still acknowledged.  I checked the next day on the portal of acer and the entrance of the tablet was gone.

  I have since reinstalled acer cloud on my tablet, all repeated the process, but the same thing happened

  Any advice would be greatly appreciated.

  Thank you

  Hi stroller,

  New version for AcerCloud, just try to update to the latest version on your PC and tablet. Hope that you can connect successfully.

• How can I get my Hp probook 4530 s

  I have hp probook 4530 s and I want it back to the original factory setting, I've already converted my dynamic disk at the base form, but its still does not

  This can runif you still have the recovery hard disk partition. I suggest that you try this first.

  Source for Microsoft Windows Vista, Windows 7 and Windows 8 ISO images with links to required software and tutorials also generously provided by the Member of the forum AXSHUN JAXSUN

  You can download the ISO image of legal Windows 7 64-bit file and then create an installation DVD.  You can use the Microsoft DVD\USB download tool to create a usb installation media. You will need a 4 or 8 GB USB flash drive to create the installer. I find the download of Microsoft DVD\USB tool to be the most effective solution because a USB installation is so much faster. You can have the installation done in thirty minutes.

  Use the license activation key located on the COA of Microsoft Windows to activate the installation.

  You can download all the drivers from the web support for your mobile portal and install them.  Install the driver first and then audio chipset and card reader drivers.

   

• JavaScript and Palm TX

  When you try to access my Hotmail via the WiFi on my Palm TX, it gives me the message "this module requires JavaScript to be enabled on your browser.  Can I solve this problem with a download function / on the Palm, or is it a function of the WiFi network you are trying to access?  Thank you!!

  I just logged on old Hotmail account my wife in seconds via the Mobile Portal of Palm , which is the default page on the TX!

  I clicked on the "HotMail" link, entered the user and Pword, clicked on 'Save password', and he went to http://mobile.live.com.   Now it will connect automatically!

  (Oh, and she has not touched this account email over the years!)  It's a shame because she seems to have won a lot of money the Nigerian lottery!   Whoo - Hoo!)

  WyreNut

  Message edited by WyreNut on 04/11/2009 10:11

• Another portal for mobile

  Hello everyone.
  I use the patch 1.4 ISE 3, flexconnect and CWA for my guests. I am also show posture for guests with agent web (they should have an AV).
  He works for computers and androids, but not for Apple devices (iPhone, iPad,...).
  Trying to do work for Apple devices, I created a new redirection rule for mobile phones (Android and iDevices) that redirect these devices to another portal (without control of posture), but it does not work, because when the user attempts to access the first, before he opens the captive portal and inserts his letters of credence ISE doesn't know that the device is an iPhone. Then this device still hit the default redirect rule that sends the user to my default CWA, which has a posture check.

  If the user tries to connect once more, it works, because now ISE knows that it is a mobile device.

  I would like to know how to identify the device on the first time that it is connected, and then send it to the correct web portal.
  Is this possible? How could I do?

  Kind regards.

  If you run ISE 1.3 or later (recommended current version 1.4 with the latest patch is) then the default state of posture is consistent, this means that if you have not a client provisioning rule for iOS devices (which you shouldn't because there is no support for these types of devices). Ignoring any loading webagent

  It would be the recommended flow, it might even be a document in the support forums already explaining this

  http://www.Cisco.com/c/en/us/support/docs/security/identity-services-Eng...

• Comments ISE FQDN Portal

  It is possible to create the portal comments FQDN?

  I'll try to explain.

  Requirements:

  Network WiFi 1) must be secured with L2-security(WPA2-Enterprise,PEAP) - redirect Web or not L3.

  WiFi 2 users) should use separate external Authority(AD or LDAP, not enterprise and not ISE local)

  (3) it is not necessary for managing personal devices.

  WiFi 4 users) must have the ability to change their password of the intranet portal, which is available with the FULL domain name.

  There is no problem with req 1-3, it doesn't seem like chance to create the portal only for change of user password. These requirements related to the question "mobile devices do not allow option to change password" If ISE send request to change (tested on iPhone, Android and WindowsMobile with Active Directory).

  Hi Sefedoro,

  The 1.3 ISE does support use of domain name COMPLETE with portals of comments. This can be defined in the authorization profile that specifies the CWA portal. However this FQDN of the portal comments accessible only by customers with active sessions in the comments workflow process. Also, change password via the portal of comments is supported for ISE internal comments and not AD accounts. Once network connectivity is established by a windows through WPA2-Enterprise client, a user can change his or her password via ctrl-alt - del-> change password option. If you use user or user authentication or computer begging I would test this process on a couple different windows builds.   BONE and the supplicant should automatically pick the password change. If you use an intermediate intranet portal, the user must connect to the wide and turn it on again for the laptop with the new credentials. You use the authentication of the computer (computer only) will avoid these problems.