topic Re: ISE VDI Integration Guide in Network Access Control

ISE VDI Integration Guide

omadrile — Thu, 02 Aug 2018 10:51:34 GMT

Hi team,

I know it's a recurrent topic but the only documentation we seem to have is this guide from back 2013 "Cisco TrustSec How-To Guide: Segmenting Clients and Servers in the Data Center Using the Cisco Nexus 1000V Series Switches": https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone-security/segmenting_clients_servers_guide.pdf

Therefore, do we have any plans to validate and document the integration of ISE with other VDI solutions i.e. Citrix, VMware, Microsoft etc.. Can you please share any estimated timeline if there's one?

Thanks,

Oriol

Re: ISE VDI Integration Guide

jeaves@cisco.com — Fri, 03 Aug 2018 08:05:46 GMT

Hi,

we are currently working on developing an agent to sit on windows/Citrix servers to provide the IP differentiation required for TrustSec/group based policies.

A release by the end of the year is the target.

Regards, Jonothan.

Re: ISE VDI Integration Guide

Craig Hyps — Fri, 03 Aug 2018 16:14:11 GMT

Note that there is also the TS-Agent that will send Passive ID info from term server to ISE which will get published to subscribes such as FTD today which includes the IP and port range assigned to connecting client, but Passive ID does not currently instantiate a session with SGT mapping. EasyConnect provides this (RADIUS authorization with optional SGT) for wired clients today when Passive ID method is WMI.

Re: ISE VDI Integration Guide

Craig Hyps — Fri, 03 Aug 2018 16:14:49 GMT

Re: ISE VDI Integration Guide

Dmitry Kazakov — Thu, 21 Feb 2019 12:14:03 GMT

Do you have any updates on development of that agent sitting on Citrix servers?

Re: ISE VDI Integration Guide

tushar_bangia — Sun, 24 Feb 2019 09:20:42 GMT

Please suggest if there is any support for the VDI infra with Cisco ISE, we need to test few of the below used cases , we generally use Cisco Amyconnect agent with EAP-Fast/EAP-TLS however there isnt any documentation wrt to the support for VDI infrastructure.

Used Cases:

-User + Machine Authentication

-Posture Assessment

Any pointers in the matter would be helpful!!

Re: ISE VDI Integration Guide

jeaves@cisco.com — Mon, 25 Feb 2019 12:31:55 GMT

Latest information from the Product Manager:

"We're collecting customer information to enrich the business justification that we're putting together to secure funding to complete the project.

Is there any information you can share about the customer (number of users, Microsoft Server version XenApp/Desktop version, deal value,..) or the partners interest (is the partner seeing a demand for this)?"