Wireless Client can t connect to ISE portal

[HAT]

Hi All

I have setting up a a wired as well as wireless SDA solution for our campus switches . This is using Central Web Authentication where all the guest devices are being authenticated through  ISE .

Although I can successfully reach the ISE portal and access the Internet on the wired side ( through a firewall)   , I m being prompted  the following link http://www.gstatic.com/generate_204"  ( instead of the ISE  portal) when trying to get Guest wireless access. 

The client  Ip address is matching the Guest Vlan subnet and according to the ISE logs it s hitting the right authorization policies.

Can you please advise on where I might be getting it wrong ?

Thank You in advance 

[Sandeep Choudhary]

it means you are using untrusted certificate on ISE.

you have to do :

1. -- portal certificate on ISE should be signed by 3rd party Trusted Authority,
2. -- use older Chrome version
3. -- use different browsers (IE or Firefox)

Also check this bug...https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvj04703

I was also hitting the same bug but after installing the trusted certificate (in my case it was on WLC due to local web Auth) , problem resolved.

Regards

Dont forget to rate helpful posts