Hi,
I have been assigned with the task of assessing if its possible to have a ISE guest portal behind a reverse proxy. Our Cisco ISE is configured with an authorization policy to redirect guest users to the guest portal when they connect to the WiFi network. The policy has the following attributes:
cisco-av-pair = url-redirect-acl=ACL_WEB_REDIRECT, cisco-av-pair = url-redirect=https://<PSN1_IP>:port/portal/gateway?sessionId=SessionIdValue&portal=2c8ae510-3b51-11e8-b669-000c29f023f5&action=cwa
From what i understand i can configure the url-redirect value with the URL of my reverse proxy. However since the ISE guest portal has a session ID value i wonder what information from the client Cisco ISE needs to establish a session ID (maybe IP address or username ??) ?
As anyone deployed Cisco ISE Guest portal behind reverse proxy? if so, what problems did you encounter? Did the reverse proxy required a special conf to make it work?
TIA
