collapse

Search


User Info

 
 
Welcome, Guest. Please login or register.
Did you miss your activation email?

Author Topic: Cisco ISE Employee onboarding web redirection portal difference  (Read 54718 times)

Offline davidferns7

  • Cisco Newbie
  • *
  • Posts: 6
  • Reputation: 0
  • Certification: CCNP
Cisco ISE Employee onboarding web redirection portal difference
« on: December 22, 2015, 02:55:26 AM »
Hi All

I had a question in regards to employee On Boarding difference in portal usage and was confused about it.

When onboarding a wired employee why is the web redirection portal set to CWA and doing the same for wireless employee onboarding, we set the web redirection to NSP.

Can the wired also be set to NSP?

Im just confused as to when to use CWA and when to use NSP and which portal during the onboarding session.

Could you please help with this.

Regards

Dave

Offline LDESA

  • Cisco Newbie
  • *
  • Posts: 7
  • Reputation: 0
  • Certification: CCNP
Re: Cisco ISE Employee onboarding web redirection portal difference
« Reply #1 on: December 22, 2015, 04:24:23 AM »
From what I have experienced and tested if you do NSP directly for BYOD it does not work well (correct me if I am wrong please) because you actually should be authenticating (logging in with AD credentials for example) before doing onboarding. When you do CWA with BYOD enabled on the portal you have the chance to log in first before doing onboarding, but with NSP you don't.
So I always use CWA with onboarding ticked on the Guest Portal page.


Offline MC

  • Global Moderator
  • Cisco Guru
  • *****
  • Posts: 401
  • Reputation: 606
  • CCIE x3 (RS,Sec,SP)
  • Certification: CCIE
Re: Cisco ISE Employee onboarding web redirection portal difference
« Reply #2 on: December 22, 2015, 10:02:40 PM »
Before device onboarding can happen, the user need to be known by the system. When ever you use MAB as a way to get user redirected to a portal, the portal need to be CWA so user can enter credential as MAB by itself contains no user info. This is true for both wired and wireless with Dual-SSID
On the other hand, if user authenticates using 802.1x where user credential is already provided, we can pass user directly to NSP portal. Again this is true for both wired and wireless with Single-SSID.

Offline davidferns7

  • Cisco Newbie
  • *
  • Posts: 6
  • Reputation: 0
  • Certification: CCNP
Re: Cisco ISE Employee onboarding web redirection portal difference
« Reply #3 on: December 23, 2015, 02:10:04 AM »
Thanks very much LDESA and MC.

Yes that makes it a lot more clearer. i've watched the videos a couple of times as well and this really helps to understand the concepts.

Much appreciated with your comments.

Regards

Dave

 

Related Topics

  Subject / Started by Replies Last post
1 Replies
21561 Views
Last post March 17, 2014, 09:55:04 PM
by MC
1 Replies
30371 Views
Last post May 21, 2014, 07:53:57 AM
by MC
3 Replies
61978 Views
Last post June 30, 2014, 11:06:30 PM
by MC
3 Replies
67167 Views
Last post June 19, 2015, 10:01:35 PM
by MC
1 Replies
53036 Views
Last post December 19, 2016, 09:32:23 PM
by MC

SimplePortal 2.3.7 © 2008-2024, SimplePortal