topic CWA -Differentiate between domain and stanalone assets. in Network Access Control

CWA -Differentiate between domain and stanalone assets.

sudheere — Mon, 11 Mar 2019 02:59:30 GMT

I am implementing ISE (1.1.1) for an larg organization. I am using IEEE802.1x computer auth for Domain joined computers and CWA for Non-domain computers(AD/domain user and guest user). Posture policy is defferent for domain and non-domain computers. I want to make CWA as fallback method for domain computers. Which attribute/condition can I use to defferntiate a domain and non-domain asset/computer if the user login with CWA.

CWA -Differentiate between domain and stanalone assets.

Tarik Admani — Fri, 18 Jan 2013 14:49:10 GMT

Hi,

You can leverage the MachineAccessRestriction feature. Look for the condition or attribute "was machine authenticated" that should let you know that a domain asset authenticated to the network. Also you can use anyconnect NAM or a group policy to set the domain issued workstations to use computer and user authentication.

Thanks,

Tarik Admani
*Please rate helpful posts*