cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4620
Views
10
Helpful
4
Replies

Disable HSTS on ISE?

tuenoerg
Cisco Employee
Cisco Employee

hi all

One of my customers is facing problems on the sponsor portal when using Chrome browser.

Chrome stops and "complains" about HSTS.

Can we disable HSTS on ISE?

or - is this there another workaround?

ISE 2.3 patch 1 is used.

Br

Tue

1 Accepted Solution

Accepted Solutions

hslai
Cisco Employee
Cisco Employee

No, this is not configurable in ISE.

Assuming Chrome stops due to the web portal is presenting the ISE server certificates for admin, the only workaround is to include the portal FQDNs in those certificates' SAN fields.

View solution in original post

4 Replies 4

hslai
Cisco Employee
Cisco Employee

No, this is not configurable in ISE.

Assuming Chrome stops due to the web portal is presenting the ISE server certificates for admin, the only workaround is to include the portal FQDNs in those certificates' SAN fields.

I have deployed sponsors portal using the same certificate that we use for Admin because it has wildcard SAN entry, but we use FQDN which does not explicitly exist in certificate (so we rely on wildcard). Due to HSTS both Chrome and Firefox report there's a problem with the certificate. In fact, the page loads fine on first attempt, but all consecutive attempts fail and certificate is blamed. What is the fix for this please?

Please check out this link for an answer... Hope this helps...



https://cisco-marketing.hosted.jivesoftware.com/thread/88180


@Bryan Byers The link you provided points to this very same conversation :)

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: