topic Re: ise with proxy in Network Access Control

ise with proxy

Pongsatorn Maneesud — Mon, 11 Mar 2019 02:28:59 GMT

Hi all,

Does anyone implements Cisco ISE with the proxy like Bluecoat ?

After the users authentication and authorization are accepted, mean that they are ready to WWW. but they still need to authenticate with Bluecoat again to access the internet.

Any ideas for this style ?

Thanks,

Pongsatorn

Re: ise with proxy

Nicholas Copeland — Thu, 30 Aug 2012 13:23:57 GMT

It is going to depend on the supplicant you use and the device type. What kind of device are you trying to use and what is the supplicant? There are some issues with mobile devices and proxies specifically with bypass lists.

Sent from Cisco Technical Support iPad App

ise with proxy

Tarik Admani — Thu, 30 Aug 2012 16:36:58 GMT

HI,

Does the blue coat support anything such as transparent proxy? Ironport does this in a way that when it is integrated with Active Directory it can find the user to ip mapping and set the condition on the fly without redirecting users for authentication.

https://kb.bluecoat.com/index?page=content&id=KB4799

Thanks,

Tarik Admani
*Please rate helpful posts*

ise with proxy

Pongsatorn Maneesud — Fri, 14 Sep 2012 09:11:11 GMT

Tarik,

You mean that if the bluecoat supports the transparent proxy and it able to integrate with LDAP or Active Directory. It will work for this scenario, right ?

Does Bluecoat and Cisco ISE need to join on the same Active Directory to perform this scenario ?

Thanks for your guy response.

Pongsatorn M.

ise with proxy

Pongsatorn Maneesud — Fri, 14 Sep 2012 09:19:47 GMT

Did you mean PAC file for proxy ?

Pongsatorn M.

ise with proxy

Nicholas Copeland — Fri, 14 Sep 2012 12:35:02 GMT

PAC file is needed for iOS devices as there isn't an option for a bypass list. But on the Android devices you can't point to the PAC file but you can put in a bypass list.

Hi, did you ever get this to

Craig Le-Butt — Tue, 10 Nov 2015 15:56:33 GMT

Hi, did you ever get this to work?

We use BC in tranparent mode, so all AD traffic will authenticate no problem. We are looking to authetnciate users created by ISE guest, I nkow can be done with Ironport, just wondered if you got round this?

cheers

Hi Craig,

Shaik Moinuddin — Wed, 09 Mar 2016 07:16:38 GMT

Hi Craig,

i wonder how you control the users thru BC who authenticated by ISE, in our scenario the wireless users authenticated against ISE and we set "do not authenticate option" in BC for the same users but in this case we unable to apply BC policies/Rules, if we enable authentication in BC then users need to provide credential two times, isn't it?

regards,

- Moin -