ISE Guest Portal Settings - HTTPS Port Range

[rdediana]

Hello team.

Looking for some insight regarding the port range available for the ISE Guest portal.

Today, using the portal setting UI in ISE the available port domain is 8000-8999.

• What is the reasoning behind this limitation?

Or, asked a differently.

• Why are we not able to uniquely bind the Guest portal to port 443; on a unique interface, or any interface?

Considering that for portal configuration illustrated below, the interface (Gigabit Ethernet 2) is exclusively reserved for Guest Portal / CWA workflow. Nothing else would be expected on that socket (IP:PORT combination).

I have a situation where a client-side policy is configured on end-user devices which prevents access to port 8443.

Any guidance or insight that could be shared with the customer would be greatly appreciated.

Regan

[kvenkata1 · Accepted solution]

Specific implementation logic/decisions can't be discussed in a public community thread. Please contact your Cisco support team to get the specifics. Those can only be shared on an NDA with the customer.

- Krish

[EvaldasOu]

This is funny actually... To discuss why ISE Guest portal runs on port 8443 instead 443 we need to sign NDA :)  ... 

Guess I will do reverse proxy here... we need to use "duck tape" workarounds for "duck tape" designs.

[Jason Kunst · Accepted solution]

I recommend providing http://cs.co/ise-feedback if there is a way we can do something better in the future. This goes directly to our Product managers.

You can change the portal you're using under portal settings

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011100.html#reference_1F6EF09DE16E480096C2619625C256C5

[EvaldasOu]

Thanks @Jason Kunst , will do!

@rdediana I have configured nginx proxy and I do redirect from here to custom ise port (8443):

server {
server_name ise-reverse-proxy-on-nginx.company-name.com;
return 308 https://ise.company-name.com:8443/portal/g?p=abcdefgh;
}