topic Re: HTTP and HTTPS ports from users to the access switches in Network Access Control

HTTP and HTTPS ports from users to the access switches

saghisha — Thu, 30 May 2019 09:02:53 GMT

Hi Team,

My customer is deploying ISE in their network, they have concerns in opening http and https between the users and the access switches. They would like to know what exactly do they loose if http and https are not opened between users and access switches.

Re: HTTP and HTTPS ports from users to the access switches

Mark Elsen — Thu, 30 May 2019 11:29:06 GMT

- None because regular users don't need access to the switches.

Re: HTTP and HTTPS ports from users to the access switches

Jason Kunst — Thu, 30 May 2019 15:29:01 GMT

The only time you need to open up http to the switches (https redirect not needed) is for redirection to do BYOD, Guest, Client provisioning (for posture - accept when using 2.2 and higher not required, see https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-22/210523-ISE-posture-style-comparison-for-pre-and.html )

See more information on redirect under the following guides
http://cs.co/ise-guest - look for the prescriptive guest guide

http://cs.co/ise-guides - look for the wired guide