topic Re: 802.1x machines cert authentication with Anyconnect in Network Access Control

802.1x machines cert authentication with Anyconnect

scsordas — Fri, 23 Nov 2018 08:29:17 GMT

Hi,

I authenticate my win machine with certificate (anyconnect NAM) via 802.1x. any way to send logged in user information as an addition information to ISE? i do not really want to use user info for authentication just have it in the log.

thanks,

Szilard

Re: 802.1x machines cert authentication with Anyconnect

ognyan.totev — Fri, 23 Nov 2018 13:49:21 GMT

I think this is not possible if you did not make user authentication .

Re: 802.1x machines cert authentication with Anyconnect

Cezar Fistik — Sun, 25 Nov 2018 03:25:17 GMT

Check this out:

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-22/210522-Configure-ISE-2-2-PIC-with-Active-Direct.html

If you're already using NAM, why not enabling user auth? You don't have to use certs for that. You can use machine certs + user/pass.