topic WSA Authentication using ISE User Auth Session in Network Access Control

WSA Authentication using ISE User Auth Session

Jay Tiwari — Mon, 26 Aug 2019 09:12:13 GMT

Hi Experts,

Goal: WSA Authentication using ISE User Auth Session. ISE will share user auth session using pxGrid.

Setup Details: ISE 2.4 Patch 9 and WSA 11.7.0 and ISE is integrated to WSA. I can see SGT information in WSA too.

Problem/Issue in Setup:

1. Can't see WSA in ISE pxGrid subscriber page

2. Also can't see ISE authenticated user auth session in WSA, though I can see SGT

Question:

1. Is anyone deployed WSA authentication using ISE user auth session iformation

2. Is anyone faced above two problems or issues?

Regards,

Jay

Re: WSA Authentication using ISE User Auth Session

Jason Kunst — Mon, 26 Aug 2019 21:26:39 GMT

Please work through the TAC on this

Re: WSA Authentication using ISE User Auth Session

jeppich — Mon, 26 Aug 2019 22:49:21 GMT

I responded to Jay off-line.

Thanks,

John

jeppich@cisco.com

Re: WSA Authentication using ISE User Auth Session

Jason Kunst — Wed, 28 Aug 2019 21:11:51 GMT

thanks gentleman perhaps you can share any info on actual issue and outcome to help us in future @Jay Tiwari

Re: WSA Authentication using ISE User Auth Session

Jay Tiwari — Thu, 29 Aug 2019 10:43:21 GMT

Hi Guys,

I had offline discussion with John Eppich, and understood that access policy in WSA is not possible on the basis of ISE authenticated active user session, it is possible with either SGT or with AD Groups.

Regards,

Jay