topic Re: Thin Client Support with ISE in Network Access Control

Thin Client Support with ISE

pratigan — Fri, 22 Jun 2018 05:07:31 GMT

We have client who has around 60% of their endpoints on thin clients & we are proposing ISE for rest of the infrastructure.

We would like to explore whether thin clients will be supported by ISE or not. We have following details of thin client from customer.

DELL

7020

T5740e

T610

T620

T-620

On these Thin-Clients we have a Flash drive. On Dell Thin Client 32 GB of Flash & on HP 16GB of Flash. Thin clients do have Windows embedded OS installed with lock down mode.

Do let me know if we can do authentication for these thin clients

Re: Thin Client Support with ISE

Jason Kunst — Fri, 22 Jun 2018 10:54:52 GMT

It’s not a matter of ISE supporting the thin clients. We support any endpoints connecting to network with mab to start.

Recommendation would be to work with vendor to see if they support dot1x and eventually certificate authentication for best security and controls

It’s all up to endpoint software and supplicant capabilities

Re: Thin Client Support with ISE

pratigan — Fri, 22 Jun 2018 11:17:52 GMT

Hi Jason,

we are talking with customer where he has more than 5000 thin clients & client needs definite answers for which we will run POC.

i would like to know whether we have any use-cases for thin clients which is already live.

Re: Thin Client Support with ISE

Jason Kunst — Fri, 22 Jun 2018 11:56:06 GMT

Again this has nothing to do with ISE support of the thin clients, if they have a dot1x supplicant then will work for cases of user or machine auth with eap peap tls etc

You can also reference compatibility

https://www.cisco.com/c/en/us/support/security/identity-services-engine/products-device-support-tables-list.html

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/compatibility/b_ise_sdt_24.html#clientossupplicantsagents

Please verify with vendor os for supplicant capabilities for dot1x support

Also I googled and found some results as well

https://www.google.com/search?q=ise%20thin%20client

For reference customers you may look at listing under http://cs.co/selling-ise

Re: Thin Client Support with ISE

sam99 — Sat, 17 Aug 2019 00:33:46 GMT

Re: Thin Client Support with ISE

Adam Hinchliff — Mon, 02 Sep 2019 04:50:57 GMT

Hi Pratigan,

How did you go with this?

We have about 30 or so HP thin clients that we are looking at transitioning to ISE.

Cheers

Adam