Cisco Ise 13 User Guide
Have a look at the manual Cisco Ise 13 User Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 53 Cisco manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
Customize Device Portals Youcancustomizetheportalappearanceanduser(guests,sponsors,oremployeesasapplicable)experience bycustomizingtheportalthemes,changingUIelementsontheportalpages,andeditingerrormessagesand notificationsthatdisplaytotheusers.Formoreinformationaboutcustomizingportals,seeCustomizationof End-UserWebPortals,onpage359. Manage Personal Devices Added by Employees WhenemployeesregisteradeviceusingtheBringYourOwnDevice(BYOD)ortheMyDevicesportals,it displaysintheEndpointslist.Althoughemployeescandisassociateadevicefromtheiraccountbydeleting it,thedeviceremainsintheCiscoISEdatabase.Asaresult,employeesmightneedyourassistanceinresolving errorstheyencounterwhenworkingwiththeirdevices. Display Devices Added by an Employee YoucanlocatedevicesaddedbyaspecificemployeeusingthePortalUserfielddisplayedontheEndpoints listingpage.Thismightbeusefulifyouneedtodeletedevicesregisteredbyaspecificuser.Bydefault,this fielddoesnotdisplay,soyoumustenableitfirstbeforesearching. Procedure Step 1ChooseAdministration>IdentityManagement>Identities>Endpoints. Step 2ClicktheSettingsiconandchooseColumns. Step 3SelectPortalUsertodisplaythisinformationintheEndpointslisting. Step 4ClicktheShowdrop-downlistandchooseQuickFilter. Step 5Entertheuser’snameinthePortalUserfieldtodisplayonlytheendpointsthatareassignedtothatparticular user. Errors When Adding Devices to My Devices Portal Employeescannotaddadevicethatwasalreadyaddedbyanotheremployee,andthatdeviceisstillinthe endpointsdatabase. IfemployeesattempttoaddadevicethatalreadyexistsintheCiscoISEdatabase: •Anditsupportsnativesupplicantprovisioning,werecommendaddingthedevicethroughtheBYOD portal.Thisoverwritesanyregistrationdetailsthatwerecreatedwhenitwasinitiallyaddedtothe network. •IfthedeviceisaMACAuthenticationBypass(MAB)device,suchasaprinter,thenfirstresolve ownershipofthedevice.Ifappropriate,youcanremovethedevicefromtheendpointsdatabaseusing theAdminportal,sothatthenewownercansuccessfullyaddthedeviceusingtheMyDevicesportal. Cisco Identity Services Engine Administrator Guide, Release 1.3 355 Manage Personal Devices Added by Employees
Note Devices Deleted from My Devices Portal Remain in Endpoints Database WhenanemployeedeletesadevicefromtheMyDevicesportal,thedeviceisremovedfromtheemployee’s listofregistereddevices,butthedeviceremainsintheCiscoISEendpointsdatabaseanddisplaysinthe Endpointslist. TopermanentlydeletethedevicefromtheEndpointspage,chooseAdministration>IdentityManagement >Identities>Endpoints. Monitor My Devices Portals and Endpoints Activity CiscoISEprovidesvariousreportsandlogsthatallowyoutoviewendpointandusermanagementinformation andguestandsponsoractivity.SomeoftheCiscoISE1.2reportshavebeendeprecated,buttheinformation canbeviewedinotherreports. Youcanrunthesereportseitherondemandoronascheduledbasis. Procedure Step 1ChooseOperations>Reports. Step 2UndertheReportSelector,expandtheGuestAccessReportsandEndpointsandUsersselectionstoview thevariousguest,sponsor,andendpointrelatedreports. Step 3SelectthereportandchoosethedatawithwhichyouwanttosearchusingtheFiltersdrop-downlist. Youcanusefiltersonusername,portalname,devicename,endpointidentitygroupandothersuchdata. Step 4SelecttheTimeRangeduringwhichyouwanttoviewthedata. Step 5ClickRun. My Devices Login and Audit Report TheMyDevicesLoginandAuditreportisacombinedreportthattracks: •LoginactivitybyemployeesattheMyDevicesportal. •Device-relatedoperationsperformedbytheemployeesintheMyDevicesportal. Thisreportisavailableat:Operations>Reports>GuestAccessReports>MyDevicesLoginandAudit. Registered Endpoints Report TheRegisteredEndpointsreportprovidesinformationaboutalltheendpointsthatareregisteredbyemployees. Thisreportisavailableat:Operations>Reports>EndpointsandUsers>RegisteredEndpoints.You canrunaqueryonthefollowing:identity,endpointID,identityprofile,andthelike,andyoucangeneratea Cisco Identity Services Engine Administrator Guide, Release 1.3 356 Monitor My Devices Portals and Endpoints Activity
report.Forinformationonsupplicantprovisioningstatisticsandrelateddata,seeViewingClientProvisioning Reports. YoucanquerytheendpointdatabaseforendpointsthatareassignedtotheRegisteredDevicesendpointidentity group.YoucanalsogeneratereportsforspecificusersthathavethePortalUserattributesettoanon-null value. TheRegisteredEndpointsReportprovidesinformationaboutalistofendpointsthatareregisteredthrough deviceregistrationportalsbyaspecificuserforaselectedperiodoftime. Cisco Identity Services Engine Administrator Guide, Release 1.3 357 Monitor My Devices Portals and Endpoints Activity
Cisco Identity Services Engine Administrator Guide, Release 1.3 358 Monitor My Devices Portals and Endpoints Activity
CHAPTER 17 Customize End-User Web Portals •End-UserPortals,page359 •CustomizationofEnd-UserWebPortals,page359 •PortalContentTypes,page362 •BasicCustomizationofPortals,page363 •AdvancedCustomizationofPortals,page371 •PortalLanguageCustomization,page390 •CustomizationofGuestNotifications,Approvals,andErrorMessages,page393 End-User Portals CiscoISEprovidesweb-basedportalsforthreeprimarysetsofendusers: •GuestswhoneedtotemporarilyaccessyourenterprisenetworkusingtheGuestportals(Hotspotand credentialedGuestportals) •EmployeeswhoaredesignatedassponsorswhocancreateandmanageguestaccountsusingtheSponsor portal. •Employeeswhoareusingtheirpersonaldevicesontheenterprisenetworkusingthevariousnon-guest portalssuchastheBringYourOwnDevice(BYOD),MobileDeviceManagement(MDM),andMy Devicesportals. Customization of End-User Web Portals Ciscoprovidesseveraldefaultportals,andletsyouedit,duplicate,andcreateextraportals.Youcanalsofully customizetheportalappearanceand,therefore,theportalexperience.Youcancustomizeeachindividual portalwithoutaffectingotherportals. Youcancustomizevariousaspectsoftheportalinterfacethatapplytotheentireportalortospecificpages oftheportal,suchas: •Themes,images,colors,banners,andfooters Cisco Identity Services Engine Administrator Guide, Release 1.3 359
•Languagesusedfordisplayingportaltext,errormessages,andnotifications •Titles,content,instructions,andfieldandbuttonlabels •Notificationssenttoguestsviaemail,SMS,andprinter(appliesonlytotheSelf-RegisteredGuestand Sponsorportals) •Errorandinformationalmessagesdisplayedtousers Cisco Identity Services Engine Administrator Guide, Release 1.3 360 Customization of End-User Web Portals
•Customfieldstogatherguestinformationspecifictoyourneeds(appliesonlytotheSelf-Registered GuestandSponsorportals) Figure 24: Portal Page Layout for Customization Cisco Identity Services Engine Administrator Guide, Release 1.3 361 Customization of End-User Web Portals
Customization Methods Thereareseveraldifferentwaystocustomizetheend-userportalspages,whichrequiredifferentlevelsof knowledge. •Basic—AllmodificationsaredoneontheportalCustomizationpage,whereyoucan: ◦Uploadbannersandlogos. ◦Changesomecolors(exceptforbuttons). ◦Changethetextonthescreens,andthelanguageusedontheentireportal. •Intermediate ◦Usethemini-editortoaddHTMLandJavascript. ◦UsethejQuerymobilethemerollertochangethecolorofallpageelements. •Advanced ◦ManuallymodifypropertiesandCSSfiles. Afteryoucustomizeyourportal,youcancreatemultipleportals(ofthesametype)byduplicatingit.For example,ifyoucustomizedyourHotspotGuestportalforonebusinessentity,youcanduplicateitandmake minorchangestocreatecustomHotspotGuestportalsforotherbusinessentities. Tips for Customizing Portals with the Mini Editors •Longwordsinamini-editorboxmayscrolloffthescreenareaoftheportal.Topreventthis,usethe HTMLparagraphattributestyle="word-wrap:break-word".Forexample: thisisaverylonglineoftextthatwillexceedthewidthoftheplacethatyouwanttoputitsousethisstructure •WhenyouuseHTMLorjavascripttocustomizeportalpages,makesurethatyouusevalidsyntax.The tagsandcodethatyouenterintoamini-editorisnotvalidatedbyISE.Invalidsyntaxmaycauseproblems duringtheportalflow. Portal Content Types CiscoISEprovidesadefaultsetofportalthemesthatyoucanuse“asis”orcustomizebyusingtheexisting CSSfilesasmodelstocreatenewcustomfiles.However,youcanaltertheappearanceoftheportalswithout usingcustomizedCSSfiles. Forinstance,ifyouwanttouseuniquecorporatelogosandbannerimages,youcansimplyuploadanduse thesenewimagefiles.Youcancustomizethedefaultcolorschemebychangingthecolorofthedifferent elementsandareasoftheportals.Youcanevenchoosethelanguageinwhichyouwanttoviewthecustom changesasyoumakethem. Whenyoudesignimagestoreplacethelogosandbanner,maketheimagesasclosetothefollowingpixel sizeasyoucan: Cisco Identity Services Engine Administrator Guide, Release 1.3 362 Portal Content Types
1724X133Banner 86X45DesktopLogo 80X35MobileLogo NotethatISEresizestheimagestofittheportal,butimagesthataretoosmallmaynotlookrightafterresizing. Toperformadvancedcustomization,suchaschangingthepagelayoutoraddingvideoclipsoradvertisements toyourportalpages,youcanuseyourowncustomCSSfiles. Thesetypesofchangeswithinaspecificportalareappliedgloballytoallthepagesofthatportal.Changesto thepagelayoutcanbeappliedeithergloballyortojustonespecificpageintheportal. Portal Page Titles, Content, and Labels Youcancustomizethetitles,textboxes,instructions,fieldandbuttonlabels,andothervisualelementsthat theguestviewsontheend-userwebportalpages.Whileyouarecustomizingthepage,youcaneveneditthe pagesettingsdynamically. Thesechangesareappliedonlytothespecificpagethatyouarecustomizing. Basic Customization of Portals Selectapredefinedthemethatbestsuitsyourneeds,andusemostofitsdefaultsettings.Youcanthendo somebasiccustomization,suchas: •ModifythePortalThemeColors,onpage363 •ChangethePortalIcons,Images,andLogos,onpage365 •UpdatethePortalBannerandFooterElements,onpage365 •ChangethePortalDisplayLanguage,onpage364 •ChangetheTitles,Instructions,Buttons,andLabelText,onpage366 •FormatandStyleTextBoxContent,onpage366 YoucanViewYourCustomization,onpage370asyoumaketheupdates.Tip Modify the Portal Theme Colors Youcancustomizethedefaultcolorschemeinthedefaultportalthemesandchangethecolorofthedifferent elementsandareasoftheportals.Thesechangesapplytotheentireportalthatyouarecustomizing. Ifyouplantochangetheportalcolors,beawareofthefollowing: •Youcannotusethisoptiontochangethecolorschemeinanyofthecustomportalthemesthatyoumay haveimportedforusewiththisportal.YoumusteditthecustomthemeCSSfiletochangeitscolor settings. Cisco Identity Services Engine Administrator Guide, Release 1.3 363 Basic Customization of Portals
•Afterchangingthecolorsinaportaltheme,ifyouselectanotherportalthemefromthePortalTheme drop-downmenu,thechangesarelostintheoriginalportalthemeanditrevertstoitsdefaultcolors. •Ifyoutweakthecolorsofaportalthemewithanalreadymodifiedcolorschemeandthenresetitscolors beforesavingit,thecolorschemerevertstoitsdefaultcolorsandanypreviousmodificationsarelost. Procedure Step 1Navigatetotheseportals: •ForGuestportals,chooseGuestAccess>GuestPortals>Edit>PortalPageCustomization. •ForSponsorportals,chooseGuestAccess>Configure>SponsorPortals>Edit>PortalPage Customization. •ForDeviceportals,chooseAdministration>DevicePortalManagement>(anyPortals)>Edit >PortalPageCustomization. Step 2SelectoneofthedefaultthemesfromthePortalThemedrop-downlist. Step 3ClickTweakstooverridesomeofthecolorsettingsintheselecteddefaultportaltheme. a)Changethecolorsettingsforthebannerandpagebackgrounds,text,andlabels. b)Ifyouwanttoreverttothetheme’sdefaultcolorscheme,clickResetColors. c)ClickOKifyouwanttoviewthecolorchangesinPreview. Step 4ClickSave. Change the Portal Display Language Youcanchoosethelanguageinwhichyouwanttoviewthecustomchangesasyoumakethem.Thischange appliestotheentireportalthatyouarecustomizing. Procedure Step 1Navigatetotheseportals: •ForGuestportals,chooseGuestAccess>Configure>GuestPortals>Edit>PortalPage Customization>GlobalCustomization. •ForSponsorportals,chooseGuestAccess>Configure>SponsorPortals>Edit>PortalPage Customization>GlobalCustomization. •ForDeviceportals,chooseAdministration>DevicePortalManagement>(anyPortals)>Edit >PortalPageCustomization>GlobalCustomization. Step 2FromtheViewIndrop-downlist,choosethelanguageinwhichyouwanttoviewthetextwhilecustomizing thepage. Thedrop-downlistincludesalllanguagesinthelanguagefileassociatedwiththespecificportal. Cisco Identity Services Engine Administrator Guide, Release 1.3 364 Basic Customization of Portals