topic Re: ISE 2.3 Active Directory OU authentication in Network Access Control

ISE 2.3 Active Directory OU authentication

christopher.dove@dof.ca.gov — Tue, 10 Jul 2018 20:56:30 GMT

Hi,

I'm trying to create a authorization policy using an active directory OU (both user and machine objects). But I'm unable to the OU to ISE. It only allow security groups. Please advise.

Re: ISE 2.3 Active Directory OU authentication

hslai — Tue, 10 Jul 2018 23:00:15 GMT

It's not recommended to use OU, which is not indexed, so would result in poorer performance.

If you have to use it, then you may write conditions on the AD attribute "distinguishedName"

Re: ISE 2.3 Active Directory OU authentication

kenneth-goh — Thu, 07 Nov 2019 10:26:02 GMT

How do I create Authorization Policy using Active Directory Security Groups? Thanks.

Re: ISE 2.3 Active Directory OU authentication

Colby LeMaire — Thu, 07 Nov 2019 14:53:10 GMT

Join ISE to Active Directory. Then add whatever groups you want to use into ISE. At that point, then you will be able to use the AD groups in your authorization policies.

Re: ISE 2.3 Active Directory OU authentication

kenneth-goh — Fri, 08 Nov 2019 01:31:27 GMT

I could see the option for OU 'CERTIFICATE Subject - Organization Unit'

Which option is for Active Directory Security Policy to add the groups?