A specific guest portal within Cisco Identity Services Engine (ISE) 3.3 stops functioning after an ISE application restart. Specifically, whenever guest users attempt to access this portal, they see a completely blank/white page. This issue impacts ISE versions 3.3, 3.4, and 3.5, and consistently affects the same Guest Portal. Other configured Guest Portals on the system do not experience this issue.
The following logs were observed in guest.log whenever a user attempted to access one of the non-functioning portals.
2025-01-18 10:38:00,540 ERROR [https-jsse-nio-10.205.1.7-8002-exec-10][[]] cisco.ise.portalwebaction.controller.PortalPreResultListener -:CD01CD0A010B3F987AAC7704::::- Portal Web Action Exception:
com.cisco.ise.portalwebaction.exceptions.PortalWebActionException: Exception encountered in Flow Processor
at com.cisco.ise.portalwebaction.controller.PortalStepController.transition(PortalStepController.java:131) ~[portal-web-action-utils-3.3.0-430.jar:?]
at com.cisco.ise.portalwebaction.controller.PortalPreResultListener.handleStepTransition(PortalPreResultListener.java:167) ~[portal-web-action-utils-3.3.0-430.jar:?]
...
Caused by: com.cisco.cpm.guestaccess.flowmanager.exception.FlowProcessorException: Software Error
at com.cisco.cpm.guestaccess.flowmanager.processor.PortalFlowProcessor.getNextTransition(PortalFlowProcessor.java:230) ~[guestaccess-flowmanager-3.3.0-430.jar:?]
at com.cisco.ise.portalwebaction.controller.PortalStepController.transition(PortalStepController.java:88) ~[portal-web-action-utils-3.3.0-430.jar:?]
... 58 more
Caused by: org.hibernate.LazyInitializationException: could not initialize proxy [com.cisco.cpm.guestaccess.im.portal.step.PortalFlowStep#35cb0038-c3ed-44d0-83eb-dba58e3fb9ec] - no Session
at org.hibernate.proxy.AbstractLazyInitializer.initialize(AbstractLazyInitializer.java:170) ~[hibernate-core-5.5.2.Final.jar:5.5.2.Final]
at org.hibernate.proxy.AbstractLazyInitializer.getImplementation(AbstractLazyInitializer.java:310) ~[hibernate-core-5.5.2.Final.jar:5.5.2.Final]
at org.hibernate.proxy.pojo.bytebuddy.ByteBuddyInterceptor.intercept(ByteBuddyInterceptor.java:45) ~[hibernate-core-5.5.2.Final.jar:5.5.2.Final]
Product: Cisco Identity Services Engine (ISE)
Software Version: 3.3, 3.4, 3.5
Component: ISE Guest / Sponsor / SAML
Configuration: Multiple Guest Portals; only specific portals are affected after application restarts
Recent Changes: ISE application restarts
Defect CSCwq58770 was identified and filed for this issue. This defect is resolved in ISE 3.3 Patch 8, 3.4 Patch 4, and 3.5 Patch 2.
As a workaround, the portal must be recreated from a default portal or the portal's ports must be changed and reverted to restart the portal.
Stale flow entries for Guest Portals being inserted into the database after Application Server restart caused this defect.
| Revision | Publish Date | Comments |
|---|---|---|
1.0 |
27-Apr-2026
|
Initial Release |