topic Re: Custom Approval Request Email : FQDN in Network Access Control

Custom Approval Request Email : FQDN

christian.faessler — Tue, 16 Nov 2021 08:35:21 GMT

We are running a self-registration gues WLAN with sponsor approval. After a guest user has requested an account for this WLAN, ISE sends an approval request email to the sponsor.

In this Email, the link which will trigger the approval is generated by some preconfigured tags in ISE ($ui_self_reg_email_approve_link_start$ Approve $ui_self_reg_email_approve_link_end$) which are using the IP address of the ISE server but not the FQDN.

Can anyone tell me if it's possible to adjust these links so the FQDN is being used instead of the IP address?

Thanks,

Christian

Re: Custom Approval Request Email : FQDN

Arne Bier — Wed, 24 Nov 2021 01:56:41 GMT

Hoi Christian!

I was looking for this page a month ago to simply change the icon/logo to the non-ISE default and I found the answer in the Sponsor Portal config page. However, I could not find the config page in ISE that shows the layout of the email that a sponsor will receive.

If you find the answer please let us know!

Arne

Re: Custom Approval Request Email : FQDN

stiffyyy — Wed, 02 Jul 2025 12:12:36 GMT

Has anybody figured this out? I have the same question. I want to adjust the URL which is behind the variable to F5 loadbalancer.

Re: Custom Approval Request Email : FQDN

Arne Bier — Wed, 02 Jul 2025 21:35:29 GMT

I just had a look at our prod platform, and the email I receive to Approve/Deny the guest account contains the FQDN of the Sponsor Portal, and not the IP address. ISE 3.3p6

From my lab ISE node below, see where the Sponsor Portal FQDN is set (this is the FQDN that ISE uses for the URL sent by email):

Re: Custom Approval Request Email : FQDN

stiffyyy — Thu, 03 Jul 2025 08:35:35 GMT

That defenitely helps and confirm my assumption. I wonder where in the guest portal I define which sponsor portal is being used.

Jason Kunst is talking about the first matched sponsor. ISE Single Click Sponsor Approval FAQ - Cisco Community

I wonder based on what criteria is the sponsor portal (and therefore the FQDN you mentioned Arner Bier) is being matched.

My goal would be a second sponsor portal in which its FQDN is pointing to a URL configured on F5 loadbalancer. Reason being is that I want to have loadbalancing and high availability of the sponsor portal.

And I cannot understand where in the guest portal to configure which sponsor portal (FQDN) to use.

Re: Custom Approval Request Email : FQDN

Arne Bier — Thu, 03 Jul 2025 20:26:19 GMT

I don't know if I agree with your statement "I wonder where in the guest portal I define which sponsor portal is being used". There is only one FQDN for the sponsor portal - you set that FQDN and then let DNS do the rest. If your sponsor portal is configured in ISE as sponsor.mycompany.com and the email is sent, then the email contains the URL for that FQDN. If you want to load balance, then you need to trick your DNS - in F5 land that means playing with the GTM. I have never done that but that would be my assumption.

Re: Custom Approval Request Email : FQDN

stiffyyy — Mon, 07 Jul 2025 07:38:48 GMT

I have figured it out - in the guest portal under Portal Behaviour and Flow Settings > Registration Form Settings > Approve/Deny Links > Details I was able to modify (aka mapping) the used sponsor portal.

Re: Custom Approval Request Email : FQDN

Arne Bier — Mon, 07 Jul 2025 20:34:06 GMT

Ok cool. I understand your question now - you wanted to select which Sponsor Portal (you have multiple Sponsor Portals to choose from ... for whatever reason) - I thought you were asking about manipulating the FQDN of the URL of a Sponsor Portal.