Cisco ISE Web Guest Portal - Code 400 Bad Requet

[Agung1007]

Hi Team,

Cheers.

Our customer environment is using Cisco ISE 3.1 Patch 3 and WLC 5520 8.10.171 with Client connecting to SSID that used Guest-Portal (Authentication using Azure-AD).

in the last weeks,

when client connect to SSID (normal for the first time, the guest portal redirect showed up), and then hibernate the Windows device, and tomorrow come to work again,

it shows on Error 400 Bad Request (picture attached) when connecting to SSID.

FYI, when client restart the Windows, the client can connect normally.

what causing this? is anyone experiencing this type of issue?

Thanks

*in another customer, they also experiencing this issue, while using ISE 2.4

[Charlie Moreton · Accepted solution]

Hibernation causes this.  When the machine "wakes up" from hibernation, it tries to use the RADIUS Session ID that was in use prior to the hibernation.  During the time the machine is in hibernation, ISE does not receive traffic from the session and terminates it.  This is as designed and is working properly.

[Agung1007]

Hi Sir,

thanks for the response.

So in which case, it caused by Windows machine that when "wake up" from the hibernate mode, and try to connect to SSID, the session in the browser and ISE is "not match" and then it shows Error Code 400 ?

And the work around is "not hibernate" the windows and shutdown/restart the Windows?

Thanks

[Charlie Moreton]

That is correct, though not technically a workaround.