Guest portal AUP presents always the default Cisco text

[Infrastructure Team RZ]

Hello,

I'm working on the implementation of our guest portal and it is ready to be implemented minus one nasty issue. And whatever I try it does not work.

The issue;

We use Cisco ISE 3.4 sp1 (3.4.0.163)

We have a company AUP and I filled this is below the "Acceptable Use Policy" -Instructional Text, if filled in, I do not see a direct  preview, but have to 'Render Preview'. Once done the page and text look exactly how I have this intended.I click Save and run the preview to check again, still my page looks as intended. 

I then link the page to an Authorization Profile and select Web Redirection (Hot Spot) and select the created Guest Portal in the value field. Ready for testing.

Once testing the page 'live' I always see the portal as I designed it, but always with the default Cisco AUP instead of my company AUP.

To troubleshoot I,
-used multiple browsers, Chrome, Firefox, Edge
-deleted all portals and started all over, also deleted the default examples
-deleted my profiles and relations and started all over again
-installed sp1
-tried to create a portal using the ISEPB design tool
-tried many different orders of working-

I've no idea where to look next, does anybody here have an idea or tip? My next step will be a Cisco TAC case I think

[AshSe]

Hello @Infrastructure Team RZ 

It sounds like you've done a thorough job troubleshooting the issue with your Cisco ISE guest portal and the Acceptable Use Policy (AUP). The fact that the default Cisco AUP is still showing instead of your custom AUP suggests that there may be a configuration or caching issue. Here are some additional steps and considerations to help resolve the problem:

1. Check the AUP Configuration in the Portal Settings
2. Clear Browser Cache and Cookies
3. Verify the Authorization Profile Configuration
4. Check for Policy Set Conflicts
5. Test with a New Guest Portal
6. Check for ISE Caching Issues
7. Verify the ISE Version and Patch
8. Enable Debugging and Logs
9. Check the Default Portal Settings
10. Contact Cisco TAC

Additional Notes:

1. If you're using the ISEPB design tool, ensure that the exported portal is correctly imported into ISE and that no settings are being overwritten during the import process.
2. If you're using a load balancer or proxy in front of ISE, ensure that it's not caching the default AUP page.

Hope This Helps!!!

AshSe

Community Etiquette: 

1. Insert photos/images inline - don't attach.
2. Always mark helpful and correct answers, it helps others find what they need.
3. For a prompt reply, kindly tag @name. An email will be automatically sent to the member.

[Infrastructure Team RZ]

Thanks!

We did most of the steps already, alas with not result. We did no do the debug step, and we found this info:

2025-03-04 13:44:38,574 INFO [https-jsse-nio-10.x.x.x-8443-exec-9][[]] cpm.guestaccess.flowmanager.step.StepExecutor -:9ed17f060000002967c6f55f::::- Size of pTranSteps:2
2025-03-04 13:44:38,574 INFO [https-jsse-nio-10.x.x.x-8443-exec-9][[]] cpm.guestaccess.flowmanager.step.StepExecutor -:9ed17f060000002967c6f55f::::- getNextFlowStep, pTranSteps:[id: 8f5c7ff1-cf74-4ffa-ba0f-1b70879fe122, id: b93f0a1d-ac77-4046-9e01-0f6c77d615ff]
2025-03-04 13:44:38,574 INFO [https-jsse-nio-10.x.x.x-8443-exec-9][[]] cpm.guestaccess.flowmanager.step.StepExecutor -:9ed17f060000002967c6f55f::::- getNextFlowStep, stepTran:8f5c7ff1-cf74-4ffa-ba0f-1b70879fe122
2025-03-04 13:44:38,574 INFO [https-jsse-nio-10.x.x.x-8443-exec-9][[]] cpm.guestaccess.flowmanager.step.StepExecutor -:9ed17f060000002967c6f55f::::- getNextFlowStep, stepTran:b93f0a1d-ac77-4046-9e01-0f6c77d615ff
2025-03-04 13:44:38,576 INFO [https-jsse-nio-10.x.x.x-8443-exec-9][[]] cisco.ise.portalwebaction.controller.PortalFlowInterceptor -:9ed17f060000002967c6f55f::::- Portal Session is NULL, Hence skipping RateLimit Check ..!
2025-03-04 13:44:38,576 INFO [https-jsse-nio-10.x.x.x-8443-exec-9][[]] portalwebaction.utils.portal.spring.ISEPortalControllerUtils -:9ed17f060000002967c6f55f::::- mapping path found in action-forwards, forwarding to: pages/aup.jsp
2025-03-04 13:45:07,627 INFO [https-jsse-nio-10.x.x.x-8443-exec-8][[]] cpm.guestaccess.flowmanager.step.StepExecutor -:9ed17f060000002967c6f55f::::- Size of pTranSteps:1
2025-03-04 13:45:07,627 INFO [https-jsse-nio-10.x.x.x-8443-exec-8][[]] cpm.guestaccess.flowmanager.step.StepExecutor -:9ed17f060000002967c6f55f::::- getNextFlowStep, pTranSteps:[id: 1806f25c-88a0-4604-a748-2b2a3d7530c1]
2025-03-04 13:45:07,627 INFO [https-jsse-nio-10.x.x.x-8443-exec-8][[]] cpm.guestaccess.flowmanager.step.StepExecutor -:9ed17f060000002967c6f55f::::- getNextFlowStep, stepTran:1806f25c-88a0-4604-a748-2b2a3d7530c1
2025-03-04 13:45:07,628 INFO [https-jsse-nio-10.x.x.x-8443-exec-8][[]] portalwebaction.utils.portal.spring.ISEPortalControllerUtils -:9ed17f060000002967c6f55f::::- mapping path found in action-forwards, forwarding to: pages/success.jsp
2025-03-04 13:45:07,733 INFO [https-jsse-nio-10.x.x.x-8443-exec-3][[]] portalwebaction.utils.portal.spring.ISEPortalControllerUtils -:9ed17f060000002967c6f55f::::- mapping path found in action-forwards, forwarding to: /pages/jsonResponse.jsp
2025-03-04 13:45:10,754 INFO [https-jsse-nio-10.x.x.x-8443-exec-4][[]] portalwebaction.utils.portal.spring.ISEPortalControllerUtils -:9ed17f060000002967c6f55f::::- mapping path found in action-forwards, forwarding to: /pages/jsonResponse.jsp

Not sure if this is of any help

[Infrastructure Team RZ]

We found out what the issue is. In the language file the Cisco AUP text is hard coded in the field "key.guest.ui_aup_guest_text=" what ever you fill in the the AUP test for your portal, it does not matter, the Cisco AUP will always be displayed.

• To solve you need to Export the Language File (Work Centers > Guest Access > Portal & Components > Guest Portals > Edit)
• The download file is a zip that needs to be extracted
• In the extract are all language files
• In the English.properties file search for the row key.guest.ui_aup_guest_text=
• Here is the value of the default Cisco AUP behind key.guest.ui_aup_guest_text=Please accept the policy: You.....
• Now empty text in the key.guest.ui_aup_guest_text= and save the file
• You also need to check the other languages that you rendered (Portal Customization > Render Preview), all key.guest.ui_aup_guest_text= values must be empty
• If all the languages are checked and saved, zip the Languages_xxx.zip back into one file
• Back in Language File section you can now import the new zip file (Portals Settings and Customization)
• Save the file
• If you now fill in information in the AUP text and do Render Preview and Save the correct/adjusted text will be displayed
  
   
  
  
  

[JPavonM]

It happened the same to me for some users, and the problem was that you MUST setup the UAP for all locales and not only for the default one (English). Whenever a new device with different locale than English connects, the UAP changes for the default one if you have not changed it in the Portal configuration in ISE.