topic ISE And local Machine Access in Network Access Control

ISE And local Machine Access

network@bigbenkuwait.com — Mon, 11 Mar 2019 07:44:23 GMT

Hellow guys,

I created policies for Machine and user authentication under ISE, so if the machine and user is AD authenticated, then Authorization profile will be applied.

My question, if the Machine AD authenticated but the user is using local account to access, i want this user to have specific access, not deny.

How can i acheive this?

Regards

It's not exactly what you

Marvin Rhoads — Wed, 24 May 2017 10:41:55 GMT

It's not exactly what you asked for but this might work:

Copy the first AuthC result (machine and user is from AD identity source) to a second one without the user check. Since the AuthC results are evaluated top down with first match ending the processing, the second one will only be checked where there is a machine authentication but no user authentication (at least not on any identity store that ISE know about).