Authorization denial messages to clients or URL redirection once denied?
Our client would like to setup a Internet access solution for a limited number of employees belonging to a certain AD group. I have Central web auth working and can easily grant or deny access/authorization by AD group memberships, but I want a more friendly "not authorized" message or url sent to the users whom are not in the permitted AD group. Currently, a user not in the group (not permitted) can get the portal login page, followed by the AUP page, then they get the "login successful" just as the permitted users do. This seems inappropriate when they then have no access to anything.
Note, we would like to do this without any advanced license needs on ISE. We are using ISE solely for hosting our guest portals and then both local and external (AD) user authentication/authorization.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...