topic Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder in Network Access Control

Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder)

Jay233 — Mon, 05 Jun 2023 10:43:26 GMT

Hi All,

Got an issue with the ISE portal builder (https://isepb.cisco.com/#), built a new portal followed the documentation (e.g. downloaded the config/uploader tool) but this tool is not working correctly??.. Filled in the required criteria but apparently ISE is resetting the connection/tool??.. Using an admin (SuperAdmin) account and confirmed access to ISE using a browser.

ISE v3.1 - ISEPB Portal Upload & Config Tool v1.0.10

Raised a TAC case and the Cisco engineer instructed me to gather some debug files, TAC have come back and said -

I have checked the Support bundle and pcap. I can see ISE resetting the connection, but this integration is not supported by TAC.

Please reach out to isepb@external.cisco.com for further support.

Anyone seen errors like this and have a workaround??.. Tried internal and external accounts, the documentation for this tool is virtually non-existent. Not sure what the AD setting at the bottom is for, by default it populates with "Internal" so assume a local admin account is required which I have tried so many times.

Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder

Rich R — Mon, 05 Jun 2023 13:59:57 GMT

Not familiar with this tool but AD stands for Active Directory so presume it expects you to have a connection to a Windows Active directory configured which it can use to authenticate the user?

Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder

Jay233 — Mon, 05 Jun 2023 14:30:19 GMT

Hi Rich R,

Thanks for the reply, yes understand what AD stands for and in the attached picture it actually says "active directory". My question was more if its internal (the default) whats the point? This wouldn't auth to AD anyway, and I'm not sure if I wanted to use AD to auth the tool would I then change it to external or include my join point?

The lack of documentation is worrying, have looked at the tool website (https://isepb.cisco.com/#/) again and have discovered that newer ISE versions may not be compatible 😞

Overall my experiences with Cisco DNAC and ISE are a bit rubbish, DNAC upgraded to 2.3.3.6 for AP zoning feature but doesn't work (TAC told us to upgrade to 2.3.3.7)??

DNAC portal support still only supports hotspot or self reg, the portal builder is so limited (not like Aruba ClearPass) I need sponsor portal for my customer but still want my WLC to be compliant and able to provision without intervention.

Have requested support from isepb@external.cisco.com but just by the e-mail name containing external I'm not holding my breath.

Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder

Rich R — Mon, 05 Jun 2023 14:44:11 GMT

Yes I think you're probably right. Have you read the blog and FAQ?
It does say supplied AS-IS and no support except the email. External is used for mailing lists which people outside Cisco can send emails to so that's all that means.
The FAQ also mentions that it references a javascript file on ISE so if that file has changed or moved in later versions then that would break it.

PS: You know DNA Spaces (now Cisco SPACES) can also do portals?

Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder

Jay233 — Mon, 05 Jun 2023 14:46:56 GMT

Hi Rich R,

Yes using Spaces but again limited to portal type, no support for sponsored 😞

Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder

John1922 — Tue, 17 Oct 2023 15:05:40 GMT

@Jay233 Did you ever get this working? Running into the same issue

Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder

Jay233 — Wed, 18 Oct 2023 10:31:00 GMT

@John1922

No update sorry, ISE portal builder still not working for me using ISE ver 3.x.

Maybe its our install? We did (inline) upgrade ISE so would be interesting to see it it works on a clean 3.x build, not had time to test that scenario.

Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder

Rich_U — Sat, 21 Sep 2024 21:26:40 GMT

I figured out what was going on. Go to Work Centers >> Device Administration >> External Identity Sources.
Look at the name that you gave your Active Directory and enter that into the field.

If you are logging in via Internal, I'm guessing it will try to authenticate you with an internally stored credential. If you don't have one there, then add one and I'm guessing you can use those creds to upload the portal.

Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder

JPavonM — Fri, 31 Jan 2025 13:17:12 GMT

I'm also receiving this error with ISE 3.3, and trying to use "Internal" user is not working, and not even using the AD "name" I have as External Identity Source like "AD:DOMAIN" format used in the Admin login on ISE dashboard, or just "DOMAIN" seems not to work.
Sadly, all videos that I've sees in the portal builder and Youtube show this connection working straight away with the "Internal" option, but not in my case.

Sending emails to the support inbox is the only way to progress.

Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder

JPavonM — Fri, 31 Jan 2025 13:23:29 GMT

See what I've seen in the Audit Logs for the Admin access:

And disabling the "Pre-login banner" has made the trick and now I have access:

And enable login back again after the portal is uploaded.

Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder

Scott Fella — Fri, 31 Jan 2025 15:00:58 GMT

I might have to play with this also to see if I run into any issues:)

Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder

JPavonM — Fri, 31 Jan 2025 15:41:41 GMT

now the only issue that I see is when trying to Authenticate ISEPB in Cisco with my CCO account, as it's returning an error while loading the page with the login screen:

New email to the support team has been sent, but they take a lot to respond.

Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder

Rich R — Fri, 31 Jan 2025 16:23:17 GMT

Presume you've tried the usual trick of deleting all Cisco cookies and restarting the browser?

Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder

bickmnell — Tue, 25 Feb 2025 14:33:19 GMT

@JPavonM Did support ever respond to you with a solution, or did you find a solution on your own?

Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder

JPavonM — Tue, 25 Feb 2025 14:46:20 GMT

Yes and they told me they are working on it.

The only way to do it is by downloading the portal .TAR file, using the ISEPB Tool, Connect to your ISE deployment and upload the portal file.

Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder

Sean Aindow — Sun, 17 Aug 2025 15:40:43 GMT

I'm having the issue above when trying to authorize ISE Portal Builder, did you ever get a fix for this?

Re: Cisco ISE v3.1 - Using https://isepb.cisco.com/#/ (Portal builder

GabriLaurens — Tue, 11 Nov 2025 07:50:40 GMT

Hello,

I had this problem too, and I solved it by disabling the pre/post login banner in ISE. I disabled it, and it worked correctly.

Suveena Victor, from isepb@external.cisco.com, recommended doing this.