Deploying ISE for a school system and need help with using wildcard certs for their BYOD portal. Their public DNS domain suffix is, let's say, abcschools.org, but internally they use, let's say, abc.k12.xx.us.
When they are redirected to the BYOD portal, it ends up at psn.abc.k12.xx.us.
The problem is, their public wildcard cert is for *.abcschools.org, not for *.psn.abc.k12.xx.us, so the BYOD cert is not trusted.
How can I configure BYOD to show up as psn.abcschools.org, rather than psn.k12.xx.us, short of changing the DNS sufffix of the PSN?