cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3763
Views
0
Helpful
4
Replies

ISE Guest Portal Settings - HTTPS Port Range

rdediana
Cisco Employee
Cisco Employee

Hello team.

Looking for some insight regarding the port range available for the ISE Guest portal.

Today, using the portal setting UI in ISE the available port domain is 8000-8999.

  • What is the reasoning behind this limitation?

Or, asked a differently.

  • Why are we not able to uniquely bind the Guest portal to port 443; on a unique interface, or any interface?

Considering that for portal configuration illustrated below, the interface (Gigabit Ethernet 2) is exclusively reserved for Guest Portal / CWA workflow. Nothing else would be expected on that socket (IP:PORT combination).

I have a situation where a client-side policy is configured on end-user devices which prevents access to port 8443.

ise_8443.png

Any guidance or insight that could be shared with the customer would be greatly appreciated.

Regan

2 Accepted Solutions

Accepted Solutions

kvenkata1
Cisco Employee
Cisco Employee

Specific implementation logic/decisions can't be discussed in a public community thread. Please contact your Cisco support team to get the specifics. Those can only be shared on an NDA with the customer.

- Krish

View solution in original post

I recommend providing http://cs.co/ise-feedback if there is a way we can do something better in the future. This goes directly to our Product managers.

 

You can change the portal you're using under portal settings

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011100.html#reference_1F6EF09DE16E480096C2619625C256C5

View solution in original post

4 Replies 4

kvenkata1
Cisco Employee
Cisco Employee

Specific implementation logic/decisions can't be discussed in a public community thread. Please contact your Cisco support team to get the specifics. Those can only be shared on an NDA with the customer.

- Krish

This is funny actually... To discuss why ISE Guest portal runs on port 8443 instead 443 we need to sign NDA :)  ... 

 

Guess I will do reverse proxy here... we need to use "duck tape" workarounds for "duck tape" designs.

I recommend providing http://cs.co/ise-feedback if there is a way we can do something better in the future. This goes directly to our Product managers.

 

You can change the portal you're using under portal settings

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011100.html#reference_1F6EF09DE16E480096C2619625C256C5

Thanks @Jason Kunst , will do!

 

@rdediana I have configured nginx proxy and I do redirect from here to custom ise port (8443):

server {
server_name ise-reverse-proxy-on-nginx.company-name.com;
return 308 https://ise.company-name.com:8443/portal/g?p=abcdefgh;
}