topic Endpoint Identity Groups for iPSK in Network Access Control

Endpoint Identity Groups for iPSK

Terence Lockette — Mon, 01 Jul 2019 17:52:43 GMT

Hello all,

I have a simple question and hope there's a simple answer/solution to my question. I was wondering if the configuration for iPSK with ISE can use an Endpoint IDG instead of individual MAC addresses for each client part of the iPSK policy set?

Thanks!

Re: Endpoint Identity Groups for iPSK

packetplumber9 — Mon, 01 Jul 2019 18:29:18 GMT

yep, endpoint identity groups are usable in the conditions section of your iPSK policy. I only use groups in my policies, even if it's a single device.

Re: Endpoint Identity Groups for iPSK

Terence Lockette — Mon, 01 Jul 2019 19:01:12 GMT

Thanks! I actually just tested it out prior to your reply and confirmed endpoint IDGs work for iPSK. I like using groups as well because you never know when you'll be adding to it. It makes your policy clean and simple.

Thanks again!