Captive Portal on macOS for CPP

[Madura Malwatte]

ISE 2.3 patch 5

macOS high sierra (10.13.6)

Is captive portal supported on macOS for the byod CPP to do temporal agent posture check?

[Jason Kunst · Accepted solution]

It is not. You have to use full browser.

So either enable captive portal bypass on your SSID.

Or if this is part of a guest flow something like this may work. You can disable posture on the guest portal and instead redirect them to posture (CPP)
This is also depending on what type of users and if you’re using remember me or not


* If guest flow and employee posture > compliant then permit employee access
* If guest flow and employee then redirect to posture portal
* If guest endpoints permit access to internet
* If mab > redirect guest portal
*

Also check with the posture guide here
https://community.cisco.com/t5/security-documents/ise-posture-prescriptive-deployment-guide/ta-p/3680273
http://cs.co/ise-guest check out the prescriptive guest guide as well