topic Re: ISE Guest Portal Settings - HTTPS Port Range in Network Access Control

ISE Guest Portal Settings - HTTPS Port Range

rdediana — Tue, 10 Jul 2018 21:44:51 GMT

Hello team.

Looking for some insight regarding the port range available for the ISE Guest portal.

Today, using the portal setting UI in ISE the available port domain is 8000-8999.

What is the reasoning behind this limitation?

Or, asked a differently.

Why are we not able to uniquely bind the Guest portal to port 443; on a unique interface, or any interface?

Considering that for portal configuration illustrated below, the interface (Gigabit Ethernet 2) is exclusively reserved for Guest Portal / CWA workflow. Nothing else would be expected on that socket (IP:PORT combination).

I have a situation where a client-side policy is configured on end-user devices which prevents access to port 8443.

Any guidance or insight that could be shared with the customer would be greatly appreciated.

Regan

Re: ISE Guest Portal Settings - HTTPS Port Range

kvenkata1 — Wed, 11 Jul 2018 14:52:28 GMT

Specific implementation logic/decisions can't be discussed in a public community thread. Please contact your Cisco support team to get the specifics. Those can only be shared on an NDA with the customer.

- Krish

Re: ISE Guest Portal Settings - HTTPS Port Range

EvaldasOu — Tue, 05 Nov 2019 15:41:30 GMT

This is funny actually... To discuss why ISE Guest portal runs on port 8443 instead 443 we need to sign NDA 🙂 ...

Guess I will do reverse proxy here... we need to use "duck tape" workarounds for "duck tape" designs.

Re: ISE Guest Portal Settings - HTTPS Port Range

Jason Kunst — Tue, 05 Nov 2019 16:20:02 GMT

I recommend providing http://cs.co/ise-feedback if there is a way we can do something better in the future. This goes directly to our Product managers.

You can change the portal you're using under portal settings

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011100.html#reference_1F6EF09DE16E480096C2619625C256C5

Re: ISE Guest Portal Settings - HTTPS Port Range

EvaldasOu — Tue, 05 Nov 2019 16:20:03 GMT

Thanks @Jason Kunst , will do!

@rdediana I have configured nginx proxy and I do redirect from here to custom ise port (8443):

server {
server_name ise-reverse-proxy-on-nginx.company-name.com;
return 308 https://ise.company-name.com:8443/portal/g?p=abcdefgh;
}