topic Re: Sponsored guest approval - the idea in Network Access Control

Re: Sponsored guest approval - the idea

Arne Bier — Mon, 30 Dec 2019 00:44:10 GMT

ISE 2.7 has a feature to allow unregistered guest a limited time to reach internet. That would allow a sponsored user to get their creds via email. Other options are Creds via SMS.

Re: Sponsored guest approval - the idea

Jason Kunst — Mon, 30 Dec 2019 02:15:42 GMT

The credentials aren’t created until the sponsor approves them so that won’t help.

Opening up internet for email won’t work as it’s impossible to know where there service lies. Unless it’s restricted to certain email domain

The feature you were looking for is the ability to permit grace access to login after the guest account was approved and the email notification was sent. This was supposed to be in 2.7 but didn’t make it

Please reach out to our product managers at http://cs.co/ise-feedback

Re: Sponsored guest approval - the idea

Piotr Grabowski — Tue, 31 Dec 2019 08:36:28 GMT

Thank you for explanation, one quick question more - is it possible to share a "guest portal" to a person who plans a visit? I mean to apply for a guest account in advance using a webpage for example.

Regards,

Piotr

Re: Sponsored guest approval - the idea

Jason Kunst — Thu, 02 Jan 2020 04:19:08 GMT

Yes you could do that using the ISE APIs

http://cs.co/ise-api

A less secure approach would be to open up a self registration portal to the internet
Check out kiosk (search for that keyword) at http://cs.co/ise-guest

There are also more api tips tricks out there on that page

Re: Sponsored guest approval - the idea

epasqualotto — Fri, 28 Apr 2023 17:38:19 GMT

Old post but can be usefull to someone...

With external captive-portal page like https://mg.backloop.biz guests can request Internet access to sponsor and waits the approval without need to access their mail account. After the approve, session still active based on configuration. No account needed or mail confirm by guests.