topic Re: Captcha on ISE in Network Access Control

Captcha on ISE

mcavinat — Wed, 10 Oct 2018 15:28:07 GMT

Hello folks, happy Wednesday!

One of my customers had an audit non-compliance check on the absence of a Captcha Portal on their Guest Portal.

I've checked some online resources online but it seems like in all of them the Captcha Code is exposed, which is undesirable.

Question then are: (1) is there any way (using Custom Portal or other way) to add Captchas in the Guest Portal? (2) Any recommended way of doing it?

Cheers,

Re: Captcha on ISE

mcavinat — Wed, 10 Oct 2018 15:38:43 GMT

Adding more context. There is currently a Cisco hosted thread that shows how to add a Script:

https://community.cisco.com/t5/identity-services-engine-ise/cisco-ise-guest-portal-human-verification/td-p/3537739

Within the code, there is the Java script with the routines and methods used to generate the 6 random-digit code. While very debatable on how fragile this might be, we are still looking for an alternative way of doing it...

Re: Captcha on ISE

Jason Kunst — Wed, 10 Oct 2018 16:17:57 GMT

Please work through your sales team and account management for a feature enhancement. Will see also if we can come up with a better solution

Re: Captcha on ISE

Jason Kunst — Thu, 11 Oct 2018 11:20:59 GMT

For now this is only good solution.

Better solution is possible only if ISE will give possibility for calls to external API such as google etc... please reach out to account team or send ise feedback through UI for feature request

Also please help me understand why captcha is important for a system that’s isolated? It’s not exposed to internet so why would a machine be scanning page? Why wouldn’t simply enabling passcode on the page or eve using wpa-psn be a viable or even better solution? This way people don’t automatically connect to open network if in a populated environment like city building or other such environment?