topic Cisco ISE - Radius Accounting messages to Fortigate RSSO in Network Access Control

Cisco ISE - Radius Accounting messages to Fortigate RSSO

ramesh rajendran — Mon, 11 Mar 2019 07:00:49 GMT

Hi,

Has anyone managed to crack the Cisco ISE express with Fortigate RSSO?

After authentication, Cisco ISE express supposed to send radius accounting messages to forigate RSSO. However, ISE express is sending Radius accounting packets in syslog instead of proper radius packets.

If it doesnt work, I will buy Aruba clearPass product.

thanks,

Were you able to get this

aahumphrey — Wed, 05 Oct 2016 18:11:29 GMT

Were you able to get this issue resolved?

Nope. Evaluating clear pass

ramesh rajendran — Wed, 05 Oct 2016 20:26:18 GMT

Nope. Evaluating clear pass now

I am working for a new school

aahumphrey — Mon, 17 Oct 2016 19:33:10 GMT

I am working for a new school district and they have FortiAuthenticator and ISE. I am still investigating why they are using both at the same time, but FortiAuthenticator is taking accounting messages from the Wireless Controllers, and doing RSSO that way. Hopefully I can get rid of ISE all together.

If you like simplicity I would look into FortiAuthenticator since you have a Fortigate. Clearpass is the most universal, but that means it is a bigger headache to configure.

Good luck, and let me know what you end up doing. 🙂