cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2008
Views
0
Helpful
2
Replies

Cisco ISE - Smart Licensing - Authenticated HTTPS Proxy

andrewbritt
Level 1
Level 1

I have an issue getting Smart Licensing working via HTTPS Proxy that needs to be authenticated on Cisco ISE version 2.7.

 

The Proxy Server needs me to send domain\username and password for authentication

 

The proxy throws up a 407 error  "user: unauthenticated authentication status='need_credentials' authorization status='not_attempted' EXCEPTION(authentication_failed): Authentication failed either because credentials were not provided or they could not be validated"

 

I've tested the connection via a browser and the connection works, so no issues with the account being used for authentication.

 

I'm suspecting it's something to do with trying to pass the domain with the username, configured on the Proxy Settings screen.

 

I haven't been able to find any similar issues in my searches.  Has anyone had a similar issue??

 

Thanks..

2 Replies 2

balaji.bandi
Hall of Fame
Hall of Fame

If your proxy confgured for authentication based, some time it will not allow,

 

you have 2 Options :

 

Options 1 :

 

Configured WSA  to bypass authentication for this ISE IP while going out using http / https.

 

Options 2: configure ISE (i have not tested below)

 

https://www.cisco.com/c/en/us/td/docs/security/ise/2-0/admin_guide/b_ise_admin_guide_20/b_ise_admin_guide_20_chapter_0100.html#task_5EED7670B71847DE949430AB5E267DBD

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

andrewbritt
Level 1
Level 1

Thanks for your reply..  I just re-read my post and I was a little vague.

 

I have configured Option 2  i.e. proxy settings under Administration > Settings > Proxy (Proxy Host server : port, Password required details - domain\username & Password