https://community.cisco.com/t5/network-access-control/sign-guest-portal-in-cisco-ise-with-lets-encrypt-certificate/m-p/5193665#M591805 <P>Hi Guys,</P><P>&nbsp;</P><P>I am trying to accomplish what i mentionned on the title fields.</P><P>I followed the steps on this post(using certbot commands) and created the cetificate and successfully added it to ISE.</P><P><A href="https://community.cisco.com/t5/security-knowledge-base/using-let-s-encrypt-certificates-with-cisco-ise/ta-p/5090885" target="_blank" rel="noopener">https://community.cisco.com/t5/security-knowledge-base/using-let-s-encrypt-certificates-with-cisco-ise/ta-p/5090885</A></P><P>I also attached the certificate to a new portal group tag(modified the portal accordingly)and created the right authorization rule.</P><P>I added static FQDN on authorization profile to match the name on the certificate</P><P>The problem is at the redirection, the browsers show certificate error ERR_SSL_VERSION_OR_CIPHER_MISMATCH</P><P>Any idea?</P> Thu, 12 Sep 2024 09:59:15 GMT ibingbong 2024-09-12T09:59:15Z https://community.cisco.com/t5/network-access-control/sign-guest-portal-in-cisco-ise-with-lets-encrypt-certificate/m-p/5193665#M591805 <P>Hi Guys,</P><P>&nbsp;</P><P>I am trying to accomplish what i mentionned on the title fields.</P><P>I followed the steps on this post(using certbot commands) and created the cetificate and successfully added it to ISE.</P><P><A href="https://community.cisco.com/t5/security-knowledge-base/using-let-s-encrypt-certificates-with-cisco-ise/ta-p/5090885" target="_blank" rel="noopener">https://community.cisco.com/t5/security-knowledge-base/using-let-s-encrypt-certificates-with-cisco-ise/ta-p/5090885</A></P><P>I also attached the certificate to a new portal group tag(modified the portal accordingly)and created the right authorization rule.</P><P>I added static FQDN on authorization profile to match the name on the certificate</P><P>The problem is at the redirection, the browsers show certificate error ERR_SSL_VERSION_OR_CIPHER_MISMATCH</P><P>Any idea?</P> Thu, 12 Sep 2024 09:59:15 GMT https://community.cisco.com/t5/network-access-control/sign-guest-portal-in-cisco-ise-with-lets-encrypt-certificate/m-p/5193665#M591805 ibingbong 2024-09-12T09:59:15Z https://community.cisco.com/t5/network-access-control/sign-guest-portal-in-cisco-ise-with-lets-encrypt-certificate/m-p/5193833#M591811 <P>This is a known bug sorry</P><P>And the workaround "worked for me"</P> Thu, 12 Sep 2024 14:49:21 GMT https://community.cisco.com/t5/network-access-control/sign-guest-portal-in-cisco-ise-with-lets-encrypt-certificate/m-p/5193833#M591811 ibingbong 2024-09-12T14:49:21Z https://community.cisco.com/t5/network-access-control/sign-guest-portal-in-cisco-ise-with-lets-encrypt-certificate/m-p/5193835#M591812 <P><A href="https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwc64480" target="_blank">https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwc64480</A></P><P>solution!</P> Thu, 12 Sep 2024 14:49:56 GMT https://community.cisco.com/t5/network-access-control/sign-guest-portal-in-cisco-ise-with-lets-encrypt-certificate/m-p/5193835#M591812 ibingbong 2024-09-12T14:49:56Z