Question

A network engineer configured Central Web Authentication (CWA) on ISE for wireless guests. When guests connect and are redirected to the guest portal, their browsers display a certificate warning stating the certificate name does not match the site. The engineer confirmed the WLC redirect is working and the portal loads after the guest clicks past the warning. What is the BEST way to eliminate the certificate warning?

Accepted Answer

Configure the guest portal to use the ISE portal FQDN and bind a certificate whose Subject/SAN matches that FQDN, then ensure DNS resolves the FQDN to the PSN

Answer

Disable HTTPS on the guest portal and serve it over HTTP so no certificate is validated

Answer

Enable the default self-signed certificate on the WLC and export it to the guest devices

Answer

Change the portal authentication method to a local WebAuth flow on the WLC instead of CWA