topic Re: Guest Portal with IP Chrome Connect to Network Error in Network Access Control

Guest Portal with IP Chrome Connect to Network Error

Freemen — Tue, 12 Nov 2019 10:29:02 GMT

ISE2.6 guest portal redirect with IP chrome have issue.

my ISE guest cert is signed with public CA, however due to guest design, we redirect the IP of the DMZ instead of hostname,

thus the CN is not contain the IP.

is that the Chrome behavior?

Re: Guest Portal with IP Chrome Connect to Network Error

jj27 — Tue, 12 Nov 2019 10:38:18 GMT

It is the behavior of any browser and how certificates to work to validate the identity of websites. You have a few options to fix the certificate issue. What is the common name of your certificate?

Re: Guest Portal with IP Chrome Connect to Network Error

Freemen — Tue, 12 Nov 2019 14:14:03 GMT

ie and firefox able to just let me connect with continue with accept certificate warning, but Chrome not even shown the proceed with certificate warning.

due to some reason, dns cannot be shared, thus we only can redirect IP

Re: Guest Portal with IP Chrome Connect to Network Error

Jason Kunst — Tue, 12 Nov 2019 19:18:13 GMT

You will need to have a well known certificate to use with clients connecting to ISE
the certificate will need to have the IP address of the PSN(s) in the certificate SAN
Some good documents with guest and certificates

ISE Guest Access Prescriptive Deployment Guide

How To Implement Digital Certificates in ISE

Re: Guest Portal with IP Chrome Connect to Network Error

Freemen — Thu, 14 Nov 2019 05:17:17 GMT

Thanks, I aware the proper certificate is required, but just think chrome is too hardened.. even I want to accept the security warning also can't