topic Re: authentication authorization with VDI in Network Access Control

authentication authorization with VDI

mpeeters — Fri, 21 Feb 2020 19:08:21 GMT

I am looking for Cisco’s best practices around providing authentication/authorizing solution similar to ISE for physical, but how do we do that for VDI environment?

Do we have any documents, white papers, or suggestions ?

Thx

Re: authentication authorization with VDI

paul — Mon, 29 Jul 2019 14:01:34 GMT

What are you asking for best practice on? Authenticating the VDI thin clients?

Re: authentication authorization with VDI

mpeeters — Mon, 29 Jul 2019 14:37:58 GMT

Yes I believe this is the context for the requester.

Regards

Re: authentication authorization with VDI

paul — Mon, 29 Jul 2019 14:43:01 GMT

If you are talking about the thin clients then you have two options:

1) You can look at the thin client and see if they support 802.1x.

2) Use profiling (usually DHCP attributes, MAC OUI and/or NMAP data) to identify the devices.

Most times #1 is not worth the trouble as you can easily craft a DACL to limit the thin client access. The thin clients should only need access to the VDI server farm plus a few other things so the DACL should be very concise.

Re: authentication authorization with VDI

mpeeters — Mon, 29 Jul 2019 22:03:35 GMT

Yes I believe this is the context being asked about.