topic Cisco ISE - Smart Licensing - Authenticated HTTPS Proxy in Network Access Control

Cisco ISE - Smart Licensing - Authenticated HTTPS Proxy

andrewbritt — Mon, 07 Sep 2020 06:49:46 GMT

I have an issue getting Smart Licensing working via HTTPS Proxy that needs to be authenticated on Cisco ISE version 2.7.

The Proxy Server needs me to send domain\username and password for authentication

The proxy throws up a 407 error "user: unauthenticated authentication status='need_credentials' authorization status='not_attempted' EXCEPTION(authentication_failed): Authentication failed either because credentials were not provided or they could not be validated"

I've tested the connection via a browser and the connection works, so no issues with the account being used for authentication.

I'm suspecting it's something to do with trying to pass the domain with the username, configured on the Proxy Settings screen.

I haven't been able to find any similar issues in my searches. Has anyone had a similar issue??

Thanks..

Re: Cisco ISE - Smart Licensing - Authenticated HTTPS Proxy

balaji.bandi — Mon, 07 Sep 2020 08:32:51 GMT

If your proxy confgured for authentication based, some time it will not allow,

you have 2 Options :

Options 1 :

Configured WSA to bypass authentication for this ISE IP while going out using http / https.

Options 2: configure ISE (i have not tested below)

https://www.cisco.com/c/en/us/td/docs/security/ise/2-0/admin_guide/b_ise_admin_guide_20/b_ise_admin_guide_20_chapter_0100.html#task_5EED7670B71847DE949430AB5E267DBD

Re: Cisco ISE - Smart Licensing - Authenticated HTTPS Proxy

andrewbritt — Mon, 07 Sep 2020 08:51:23 GMT

Thanks for your reply.. I just re-read my post and I was a little vague.

I have configured Option 2 i.e. proxy settings under Administration > Settings > Proxy (Proxy Host server : port, Password required details - domain\username & Password