ISE Posture redirect wireless issues.

[misinsuan2229]

Hi All,

We are doing a POC for the ISE Posture on Wireless with WLC-AP setup as flexconnect. I created SSID to test the ISE posture and followed sample on the below links.

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/116143-config-cise-posture-00.html

https://www.youtube.com/watch?v=fJTho1FvtPM

We have tested that the SSID is working well, but if we try to implement the posture, we are having problem I think with regards to the redirection.

Configs lacking on our setup is the WebAuth ACL Mapping that is in the above link - when I tried to add, I got error says "Not a webauth/webpass thru enabled local switched WLAN or Request Failed: Not Webauth/WebPassthrough enabled local Switched WLAN"

Any inputs on this? I just followed the example from above links and sure that I have done all except for the WebAuth ACL because of the error.

[Surendra]

Check this document and make sure you are following the exact steps.

https://www.cisco.com/c/en/us/support/docs/wireless/flex-7500-series-wireless-controllers/113605-ewa-flex-guide-00.html 

Even though this is for External Web-Auth, similar configuration is applicable for posture as well.

[misinsuan2229]

Looks like the link is not available - can you post other link - will try also searching for the above that is similar. THanks


The Page You Have Requested Is Not Available

[Surendra]

Some junk characters are being added when you click on the URL. If you still face the issue, Please remove %C2%A0 at the end of the URL.
https://www.cisco.com/c/en/us/support/docs/wireless/flex-7500-series-wireless-controllers/113605-ewa-flex-guide-00.html

[misinsuan2229 · Accepted solution]

I have make this work already, the problem is that on the Docs it says WebPolicies and our WLC only has policy and I am trying to add the Flexconnect ACL on the Web ACL Mapping instead of the Policy only. This resolves the issue. Thanks