ISE 3.0 Guest Portal doesn't work

[Gamoruso]

Hi,

I have a ISE 3.0 on an ESXI. In last two days the guest portal is unreacheable and I receive an error also if i try to open the url portal test. I have the same result if I  try to open also the other default portal.

I tried to reload the device and the applications many times with no result.

Thas for your help.

[balaji.bandi]

is this IP address or FQDN ? is the IP changed ?

have you tried manually open from internally that guest portal ? where is this hosted ?

check some guest portal troubleshotting tips :

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/216191-troubleshoot-common-cisco-ise-guest-acce.html

[Gamoruso]

Hi balaji,

the ISE has an ip address and is always the same. I tried many times to opne the page manuly but the result is always the same and also if I try to open the portal test url.

thanks. 

[balaji.bandi]

but the result is always the same and also if I try to open the portal test url.

directly accessing portal is not working means, the http or https service down.

where is this hosted this portal. Looks like http/s service required restart, what web server iis/apache ?

[Gamoruso]

Is the default Guest page of Cisco ISE, is not hosted on an external server. 

Is possible that the VMware are denied the http/s, also if I can reach the ISE web GUI?

[Aref Alsouqi]

I remember running into a similar issue some time ago, and I could fix it by associating a different certificates tag to the portal and then re-associate the previous tag. If memory serves, I think the issue was due to some broken trust between the portals and the associated certificate.

[Mohammed al Baqari]

Hi,

I had a similar case and it was a bug in ISE 3.0. The workaround was to
change the port number of the portal (e.g from 8443 to 8445) then put the
old port number back. This was fixing it for sometime then the problem
recur.

Try to install patch5 which got the fix.

**** please remember to rate useful posts

[thomas · Accepted solution]

No helpful troubleshooting or log information.

See How to Ask The Community for Help for future requests.

Please call TAC so they can gather the appropriate information and resolve the issue.