What Step Must Be Taken on ISE PSNs Before Guest Portal Configuration?

Configure guest access services
Answer Correct answer: D — Enable session services on the Cisco ISE PSN before configuring a guest portal.

An engineer must configure guest access on Cisco ISE for company visitors. Which step must be taken on the Cisco ISE PSNs before a guest portal is configured?

  1. Install SSL certificates
  2. Create a node group
  3. Enable profiling services
  4. Enable session services Correct Answer

Community Votes

D
100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

Cisco ISE requires session services to be enabled on the PSN to support guest services, making it the necessary step before configuring a guest portal.

Configuring guest access on Cisco ISE requires specific services to be enabled on the Policy Service Nodes (PSNs). This page establishes that enabling session services is the mandatory prerequisite before a guest portal can be configured.

Choosing to install SSL certificates (Option A) is a common mistake because while certificates are required for secure HTTP, the specific prerequisite service to enable guest functionality on the PSN is session services.

Community Discussion (4 comments)

ZoneHacker 👍 1 Selected: D
Enable Session Services: Check this check box to enable network access, posture, guest, and client-provisioning services. From the Include Node in Node Group drop-down list, choose the group to which this Policy Service node belongs. Note that Certificate Authority (CA) and Enrollment over Secure Transport (EST) services can only run on a Policy Service node that has session services enabled on it.
4004aa3 👍 1 Selected: D
https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html
techjockeynet 👍 2 Selected: D
Under Admin > Deployment > Enable Session Services *hint says guest
qqqqqqqqqqq123 👍 1 Selected: D
Enable session services

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

Enabling session services on the Cisco ISE Policy Service Node (PSN) is the fundamental prerequisite for supporting guest access. When session services are enabled, it allows the node to process network access, posture, guest, and client-provisioning services. Without this feature enabled on the PSN, the node cannot host or present guest portals.

Why the Other Options Are Wrong

Installing SSL certificates (Option A) is necessary for secure portal access but is not the specific service that must be enabled on the PSN to unlock guest functionality. Creating a node group (Option B) is an optional high-availability configuration and not a strict prerequisite for configuring a guest portal. Enabling profiling services (Option C) allows ISE to identify endpoint devices but is independent of the requirement to enable guest services on the PSN.

Community Comment Notes

Commenters highlighted that the "Enable Session Services" checkbox explicitly enables "network access, posture, guest, and client-provisioning services," as noted by ZoneHacker. Techjockeynet also pointed out the configuration path under "Admin > Deployment > Enable Session Services" as the specific hint for guest access.

Official Reference

Exam Strategy

When asked about prerequisites for configuring specific ISE services like guest access, remember that the PSN must have the overarching "Session Services" enabled first, as it governs network access, posture, and client provisioning as well.

Related Analysis

← Back to 300-715 Study Guide