Cisco ISE - Smart Licensing - Authenticated HTTPS Proxy

[andrewbritt]

I have an issue getting Smart Licensing working via HTTPS Proxy that needs to be authenticated on Cisco ISE version 2.7.

The Proxy Server needs me to send domain\username and password for authentication

The proxy throws up a 407 error  "user: unauthenticated authentication status='need_credentials' authorization status='not_attempted' EXCEPTION(authentication_failed): Authentication failed either because credentials were not provided or they could not be validated"

I've tested the connection via a browser and the connection works, so no issues with the account being used for authentication.

I'm suspecting it's something to do with trying to pass the domain with the username, configured on the Proxy Settings screen.

I haven't been able to find any similar issues in my searches.  Has anyone had a similar issue??

Thanks..

[balaji.bandi]

If your proxy confgured for authentication based, some time it will not allow,

you have 2 Options :

Options 1 :

Configured WSA  to bypass authentication for this ISE IP while going out using http / https.

Options 2: configure ISE (i have not tested below)

https://www.cisco.com/c/en/us/td/docs/security/ise/2-0/admin_guide/b_ise_admin_guide_20/b_ise_admin_guide_20_chapter_0100.html#task_5EED7670B71847DE949430AB5E267DBD

[andrewbritt]

Thanks for your reply..  I just re-read my post and I was a little vague.

I have configured Option 2  i.e. proxy settings under Administration > Settings > Proxy (Proxy Host server : port, Password required details - domain\username & Password