topic Re: ISE sponsor portal URL with FQDN in Network Access Control

ISE sponsor portal URL with FQDN

kaushalparab — Fri, 27 Mar 2020 06:30:35 GMT

My sponsor portal URL is very long when i click on "portal test url".

https://iseportalurl.abc.edu.sg:8445/sponsorportal/PortalSetup.action?portal=40963c00-2e02-11e8-ba71-005056872c7f

i want to reduce length of URL as its too long to be copied and paste in broswer. can i hide this below part?

sponsorportal/PortalSetup.action?portal=40963c00-2e02-11e8-ba71-005056872c7f

how can i keep it simple to only https://iseportalurl.abc.edu.sg:8445 or even simpler?

i need this very urgent i appreciate if someone can help. Thank you.

Re: ISE sponsor portal URL with FQDN

hslai — Fri, 27 Mar 2020 20:06:12 GMT

See Portal Settings for Sponsor Portals

Fully Qualified Domain Name (FQDN)—Enter at least one unique FQDN and/or hostname for your Sponsor or MyDevices portal. For example, you can entersponsorportal.yourcompany.com,sponsor, so that when the user enters either of those into a browser, the sponsor portal displays. Separate names with commas, but do not include spaces between entries.

If you change the default FQDN, then also do the following:
- Update your DNS so that the FQDN of the new URL resolves to a valid Policy Services Node (PSN) IP address. Optionally, this address could point to a load balancer virtual IP address that serves a pool of PSNs.
- To avoid certificate warning messages due to name mismatches, include the FQDN of the customized URL, or a wildcard, in the subject alternative name (SAN) attribute of the local server certificate of the Cisco ISE PSN.

For example, if we use "iseportalurl.abc.edu.sg", which has to be unique and not used elsewhere and configured in DNS to alias to the PSN serving the portal or the load balancer VIP, then going to http://iseportalurl.abc.edu.sg/ will redirect by ISE to the particular sponsor portal.

Re: ISE sponsor portal URL with FQDN

kaushalparab — Sat, 28 Mar 2020 04:03:21 GMT

Great. Thanks for the solution. but once i do all SAN settiings and update DNS record to PSN ip address and when i type in broswer http://iseportalurl.abc.edu.sg

then

https://iseportalurl.abc.edu.sg:8445/sponsorportal/PortalSetup.action?portal=40963c00-2e02-11e8-ba71-005056872c7f

this part in red color it will be auto take care by http://iseportalurl.abc.edu.sg right? because this part in red color has ID of the portal.

So basically if type http://iseportalurl.abc.edu.sg then it should auto redirect me to

https://iseportalurl.abc.edu.sg:8445/sponsorportal/PortalSetup.action?portal=40963c00-2e02-11e8-ba71-005056872c7f

considering DNS record updated and PSN hostname added into SAN cert correct?

Re: ISE sponsor portal URL with FQDN

hslai — Sun, 29 Mar 2020 02:05:23 GMT

What you said are both correct.

Re: ISE sponsor portal URL with FQDN

kaushalparab — Mon, 30 Mar 2020 01:09:54 GMT

Thanks i will test this out today evening and let you know. Thanks a lot. Appreciate.