topic Re: SMTP mail can come from a PAN in Network Access Control

Cisco SMTP messages sent from which node

Config T — Mon, 11 Mar 2019 06:51:10 GMT

When you configure ISE with an SMTP server, which node are the alarm emails sent from? The MnT, PAN or PSN?

How about for Guest related emails, would it be the same node as the alarms?

SMTP mail can come from a PAN

Marvin Rhoads — Fri, 10 Jun 2016 02:48:38 GMT

SMTP mail can come from a PAN, Mnt or PSN node, depending on the function or feature invoking an email.

Guest related email most commonly comes from the PSN although Guest expiry notices (when configured) would come from the PAN.

Reference:

http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/installation_guide/b_ise_InstallationGuide20/Cisco_SNS_3400_Series_Appliance_Ports_Reference.html

Re: SMTP mail can come from a PAN

JP_Berlin — Wed, 23 Jan 2019 12:08:45 GMT

Hi Marvin,

Is there any kind of list which email notifications get send from which node? I have never found this anywhere but I often have customers asking exactly about this. This would really help!

Thanks,

Jonathan

Re: SMTP mail can come from a PAN

Jason Kunst — Wed, 23 Jan 2019 15:15:46 GMT

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/install_guide/b_ise_InstallationGuide24/b_ise_InstallationGuide24_chapter_0110.html#ID-1420-00000005

Re: SMTP mail can come from a PAN

JP_Berlin — Wed, 23 Jan 2019 15:38:03 GMT

Thanks Jason,

I know the port reference overview. What I am looking for is something like a mapping between Node/Persona and the different type of emails that are send out by ISE:

- Guest Account expiry notification -> PAN

- Email Alarms -> ???

- Sponsor email notification -> PSN?

- Internal user password expiry notification -> ???

- ...

Several customer of mine have been asking for this and I am sure I am not the only one...

Thanks,

Jonathan

Re: SMTP mail can come from a PAN

Jason Kunst — Thu, 31 Jan 2019 06:34:09 GMT

Guest expiry —> P-PAN
Alams —> Active MnT
Sponsor and guest notifications from guest/sponsor portal —> PSN
password expiry —> P-PAN