topic Re: Guest credentials email in Network Access Control

Guest credentials not being sent from sponsor email

dazza_johnson — Wed, 21 Jun 2017 06:53:13 GMT

I have single click guest approval configured and working. However, when the sponsor approves the guest Cisco ISE emails the guests their credentials with the sender address set to the guest email address? In other words, it looks like the guest emailed themselves (sender and destination email address set to guest email address).

I thought ISE would set the email sender to the sponsors email address (the one that approved them)? Is this statement right or wrong? If it is right, something weird is going on in my setup and I'm curious to know if anyone else has seen (and fixed) this before.

My plan B is to open a TAC case, but wanted a sanity check first.

Thanks

Re: Guest credentials email

Jason Kunst — Wed, 21 Jun 2017 12:08:07 GMT

Sounds like a bug to me, the from email should be taken from the portal setting that says either from the sponsor email or a static entry

Re: Guest credentials email

dazza_johnson — Thu, 22 Jun 2017 03:02:47 GMT

I agree, that is what it should do. I have created a TAC case to investigate this.

Thanks

Re: Guest credentials email

dazza_johnson — Fri, 30 Jun 2017 04:24:19 GMT

This is being filed by TAC as a software bug, I'm really surprised no-one noticed this during testing of the feature within Cisco....

My workaround is to source all emails from ISE using donotreply@mycompany.com instead of trying to use the sponsors email address.

Hopefully this may help someone else out....

Re: Guest credentials email

Jason Kunst — Fri, 30 Jun 2017 11:25:11 GMT

Thanks please share the defect when you have it

Re: Guest credentials not being sent from sponsor email

dazza_johnson — Wed, 05 Jul 2017 07:47:05 GMT

Bug id: CSCvf09594

Re: Guest credentials email

Guillaume BARBEROT — Fri, 02 Mar 2018 09:50:31 GMT

hi Jason

Bug CSCvf09594 is filled, and the status is "Fixed" (even with no version indicated as fixed version ... and bug is not found in release note ...)

I am using ISE 2.2 with patch6 and it is NOT fixed : still recieving guest validation emails (after sponsor has validated guest request) from the "guest" email to guest email ...

so many antispam are dropping the email ...

tcpdump of ISE (customer info removed) :

220 mailserver.abc.com Microsoft ESMTP MAIL Service ready at Fri, 2 Mar 2018 11:08:13 +0100

EHLO ise01

250-mailserver.abc.com Hello [172.30.xxx.26]

250-SIZE 26214400

250-PIPELINING

250-DSN

250-ENHANCEDSTATUSCODES

250-8BITMIME

250-BINARYMIME

250 CHUNKING

MAIL FROM:<guest@email>

250 2.1.0 Sender OK

RCPT TO:<guest@email>

250 2.1.5 Recipient OK

DATA

354 Start mail input; end with <CRLF>.<CRLF>

From: <guest@email>

To: <guest@email>

Message-ID: <256618876.71519985293549.JavaMail.iseadminportal@ise01>

Subject: Your Guest Account Credentials

MIME-Version: 1.0

regards,

Guillaume

Re: Guest credentials not being sent from sponsor email

Jason Kunst — Fri, 02 Mar 2018 11:03:27 GMT

I see this fixed in 2.3 but not a 2.2 patch, I would recommend contacting the tac to see if they can get you a hot patch

Re: Guest credentials not being sent from sponsor email

Guillaume BARBEROT — Wed, 07 Mar 2018 10:57:09 GMT

Thanks Jason

Response from TAC is also that is is fixed in ise 2.3 (but it is written like that on bug toolkit, and it is not mentionned in release note of ise 2.3)

I am still waiting to know if a fix exists in ise 2.2 (and hope to get a reply)

Will let you know

rgds,

guillaume

Re: Guest credentials not being sent from sponsor email

Jason Kunst — Thu, 08 Mar 2018 04:09:11 GMT

Try asking for a hot patch

Re: Guest credentials email

claudio visconti — Tue, 21 Feb 2023 15:14:15 GMT

Thanks dazza_johnson!!!

5 years later in 3.2 we resolve the sponsor's email problem!!!!

Re: Guest credentials not being sent from sponsor email

dazza_johnson — Tue, 21 Feb 2023 23:31:32 GMT

Haha, this is a blast from the past. I guess we got there in the end 🙂

Re: Guest credentials not being sent from sponsor email

gavinlawrence79 — Thu, 24 Oct 2024 13:46:54 GMT

I am seeing the issue in 3.3 patch 3, does anyone have a resolution. When I try through the Guest Sponsor Portal , after I've created the account I click on Notify by e-mail, select E-Mail and press OK, I then get the error message "Unable to send email."

However it works on the Admin Portal via the ISE GUI and sends the email fine.