ISE - User access/password change

Luxoft Professional — Mon, 11 Mar 2019 03:20:28 GMT

Dear All,

I've got a problem:

I use ISE to provide access to wi-fi for mobile devices only.

So, I've got a local ISE user (login: testuser, pass: testuser).

It works fine - to connect to wi-fi I enter this credentials, and get access.

BUT! If I navigate to (https://ise-01.company.com/admin/login.jsp) from any device (wired, or wi-fi). And enter the same credentials

(login: testuser, pass: testuser) - ISE will allow me to change password, and then to log-in and to view statistics.

That's very bad. How could I deny both? (I don't whant to allow password change, or logging-in)

Could you help me please?

Luxoft Professional — Mon, 22 Apr 2013 04:51:25 GMT

By the way - just mentioned: If the password is complicated (1qaz@WSX) - the problem is not happen. User password policy is empty!

topic ISE - User access/password change in Network Access Control