Which Cisco ISE component intercepts HTTP and HTTPS requests and redirects them to the Guest User Portal?

The Network Access Device (NAD), like a switch or a Wireless LAN Controller (WLC), is responsible for intercepting the client's HTTP and HTTPS traffic and then redirecting it to the appropriate Cisco ISE web portal (e.g., Guest Portal) based on the authorization policy received from the Policy Service Node. The NAD acts as the enforcement point for web authentication.

The Policy Service Node (PSN) processes authentication and authorization policies and hosts the web portals, but it does not directly intercept client traffic for redirection; that is the role of the NAD.

The Monitoring node (MnT) collects and stores operational data and logs, but it is not involved in intercepting or redirecting client traffic.

The Administration node (PAN) manages the Cisco ISE deployment, including configuration and policy management, but it does not handle real-time client traffic redirection.