topic Re: Need to hide some part of the ISE guest portal in Network Access Control

Need to hide some part of the ISE guest portal

REJR77 — Fri, 18 Jun 2021 14:15:54 GMT

Hello,

I would like to use the Guest Portal not to authenticate user but more show them that something was wrong with authentication or to advise users that they are not alowed to connect to the network.

I have a look at the How To: ISE Web Portal Customization Options, but can't find my way.

The idea is to remove the yellow part (with css? with javascript? other?)

Thanks for the help (not a dev guy :))

Re: Need to hide some part of the ISE guest portal

Karsten Iwen — Fri, 18 Jun 2021 14:26:43 GMT

If you use the portal-type "Hotspot", there will be no login-fields.

Re: Need to hide some part of the ISE guest portal

REJR77 — Fri, 18 Jun 2021 14:48:45 GMT

Hi,

Yes but in this case I would need to suppress the Accept or Decline button

Re: Need to hide some part of the ISE guest portal

Greg Gibbs — Tue, 22 Jun 2021 01:06:27 GMT

The ISE portals are not built for this type of 'dead-end' notification. You can, however, create a basic HTML page, upload it to ISE and redirect the users to this page as a result of the authorisation conditions.

See this document for an example on how to use these custom files. It's a different use case, but the process is still relevant.

Guest Hotspot with max 2 hours network access per day

Re: Need to hide some part of the ISE guest portal

REJR77 — Tue, 22 Jun 2021 16:49:41 GMT

Hi Greg,

Thanks for the tips.

Do you know if it is possible to access the file through every interface of the PSN (in the case we have several interfce on ISE) ?

I also found this link very useful https://community.cisco.com/t5/network-access-control/support-information-button-in-place-of-link/m-p/3492125

Thanks

Re: Need to hide some part of the ISE guest portal

Greg Gibbs — Wed, 23 Jun 2021 06:04:23 GMT

The custom file is not tied to a specific port, so you technically could probably access it from any interface but I haven't tried it. This is a URL redirect flow though so, similar to your guest portal flows, ideally the URL sent by ISE should be using the same interface you are using for the Guest portal (on port 8443).