ISE 2.x automatically track AD groups?

Joseph Johnson — Mon, 11 Mar 2019 07:06:22 GMT

I have heard that ISE 2.x can automatically import and/or track AD groups which helps if an AD group is moved, deleted, or created. Is that correct? With the old way, you had to add or remove groups manually if AD groups were deleted, created, or moved to another OU. Groups being moved around in AD always caused problems due to the OU changing so the AD group mapping would be wrong for authentications/authorization.

If this is correct, where is that setting because I can't seem to find it? Is there some kind of schedule to set?

Hi,

Gagandeep Singh — Fri, 23 Sep 2016 14:36:31 GMT

Hi,

Haven't seen such feature so far.

You can also look for release notes of latest release ISE 2.1

http://www.cisco.com/c/en/us/td/docs/security/ise/2-1/release_notes/ise21_rn.html#pgfId-703249

Regards

Gagan

topic ISE 2.x automatically track AD groups? in Network Access Control

ISE 2.x automatically track AD groups?

Hi,