ISE CWA guest access is not working with Windows10+IE11

[jaklibence]

Hi,

We are implementing Cisco ISE guest access and we encountered the following problem:

We are using Central Web Authentication with ISE 2.0 to authenticate guest users. When the user tries to connect from a Windows 10 Phone, or from a Windows 10 machine with IE 11 browser, the authentication page only shows up after 5 minutes.

So the flow looks like this:

- The user joins to the SSID

- He gets the redirect ACL, and a browser is being opened automatically

- He has to wait 5 minutes for the login screen

- He can authenticate

If, during that 5 min period, we open any other browser(eg. Firefox), the login screen appears immediately.

We tried this with compatibility view as well, and with that its also working properly.

As this is a guest service, unfortunately we cannot expect users to do any modification on client side, or force them to use a specific browser.

According to the ISE 2.0 compatibility matrix, windows 10 and IE 11 are both supported.

The machines we used for testing have been updated with the latest windows updates, so it must not be the problem.

Has anybody experienced similar issues?

Do you have any idea how this could be solved?

Thanks for your help!

[Jason Kunst · Accepted solution]

Is it IE11 or the edge browser? the edge browser is the one most likely to pop up automatically.

Also wondering if you prevented this auto-browser from popping up and using whatever the user launched if it worked?

See this thread on allowing access to msftncsi.com, this has to do with posture but i am thinking the MSFT edge browser might be an issue

WIndows 10 and Edge browser Auto pop up during AC posture scan

[Jason Kunst]

we have our test team validating this as well

[Jason Kunst]

WE couldn't reproduxe this issue, would recommend calling the tac