we have a requirement to offer only internet access to non domain computers connected to wired network.
so we are using CWA guest portal to authenticate those users against AD and allow Internet only through dACL.
we configured 2 authorization profiles:
redirect authorization profile: has the CWA enabled with redirect ACL, portal name, and internet only dACL.
access authorization profile: has internet only dACL.
i can see users hitting the redirect authorization, get the portal URL and dACL; however the portal URL times out and the page is not loaded.
we checked port 8443 for portal is already allowed through firewall.
the dACL permit ISE:8443, permit DNS, deny access to our local network, permit any other.
we have 3 layer architecture, users connected to a layer 2 switch.
what else could be blocking the portal?
ISE version 2.7
