My ISE customer wants to throw a banner for the endpoint users who are failed in dot1x authentication. I understand no dACL or other parameters can be sent for an Access-Reject message. I was thinking of allowing all failed users in MAB and redirect to a CWA page. Please suggest a suitable solution for how do we customise a page just to show a text message about AuthFail for failed users in ISE 1.4.
