topic Here is the Doc in Network Access Control

ISE 2.0 - AD Integration

Mostafa.Ragab — Mon, 11 Mar 2019 07:20:36 GMT

Hello All,

I have an Active directory server on a cloud. Can it be integrated with Cisco ISE 2.

Thanks in Advanve

Mostafa

Yes. As long as the ISE nodes

Marvin Rhoads — Mon, 09 Jan 2017 10:45:12 GMT

Yes. As long as the ISE nodes can communicate with the AD server(s) via the required ports and protocols. The ISE Installation Guide appendix lists those ports.

Here is the Doc

Ravi Singh — Tue, 10 Jan 2017 08:18:04 GMT

Here is the Doc

https://docs.microsoft.com/en-us/intune/deploy-use/restrict-access-to-networks

So, Should I NAT the ISE IP

Mostafa.Ragab — Tue, 17 Jan 2017 06:29:30 GMT

So, Should I NAT the ISE IP to communicate with the AD using the nated IP or it's better to install a site-to-site VPN between the cloud and my network?

If you go straight LDAP (tcp

Marvin Rhoads — Tue, 17 Jan 2017 13:28:25 GMT

If you go straight LDAP (tcp/389), it will not be encrypted. For that reason, an external (to your site) LDAP server might be better reached via a VPN tunnel.

Here's the reference for the ports used:

http://www.cisco.com/c/en/us/td/docs/security/ise/2-1/install_guide/b_ise_InstallationGuide21/b_ise_InstallationGuide21_appendix_0110.html

The one Ravi posted earlier was specific to Microsoft Intune (their MDM solution).