topic Ise personas and Active directory in Network Access Control https://community.cisco.com/t5/network-access-control/ise-personas-and-active-directory/m-p/1951301#M174127 <HTML><HEAD></HEAD><BODY><P>The primary admin node and the policy service nodes. All nodes join to AD, but when you create groups in AD and build your polices that is done from the primary admin node, the PSN nodes are responsible for enforcing these policies. This is my personal opinion.</P><P></P><P>Thanks,</P><P></P><P>Tarik Admani <BR />*Please rate helpful posts*</P></BODY></HTML> Tue, 31 Jul 2012 16:18:36 GMT Tarik Admani 2012-07-31T16:18:36Z Ise personas and Active directory https://community.cisco.com/t5/network-access-control/ise-personas-and-active-directory/m-p/1951300#M174093 <P>hello everybody ,</P><P></P><P>just a question...</P><P></P><P>which persona needs more bandwidth with Active Directory?</P><P></P><P>Supposing I have&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; admin/monitor ----------firewall ----------- policy service</P><P>on wich side should I place AD ? (cause firewall limits bandwidth?)</P><P></P><P>thank you in advance for your response</P> Mon, 11 Mar 2019 02:21:45 GMT https://community.cisco.com/t5/network-access-control/ise-personas-and-active-directory/m-p/1951300#M174093 Giuliano Gerardi 2019-03-11T02:21:45Z Ise personas and Active directory https://community.cisco.com/t5/network-access-control/ise-personas-and-active-directory/m-p/1951301#M174127 <HTML><HEAD></HEAD><BODY><P>The primary admin node and the policy service nodes. All nodes join to AD, but when you create groups in AD and build your polices that is done from the primary admin node, the PSN nodes are responsible for enforcing these policies. This is my personal opinion.</P><P></P><P>Thanks,</P><P></P><P>Tarik Admani <BR />*Please rate helpful posts*</P></BODY></HTML> Tue, 31 Jul 2012 16:18:36 GMT https://community.cisco.com/t5/network-access-control/ise-personas-and-active-directory/m-p/1951301#M174127 Tarik Admani 2012-07-31T16:18:36Z