topic Re: WMI Passive Authentication Logoff Detection in Network Access Control https://community.cisco.com/t5/network-access-control/wmi-passive-authentication-logoff-detection/m-p/3492040#M518787 <HTML><HEAD></HEAD><BODY><P>The latter.</P></BODY></HTML> Sun, 07 Jan 2018 04:43:38 GMT hslai 2018-01-07T04:43:38Z WMI Passive Authentication Logoff Detection https://community.cisco.com/t5/network-access-control/wmi-passive-authentication-logoff-detection/m-p/3492039#M518779 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>In ISE 2.2, just want to clarify whether the ISE WMI Passive ID provider supports retrieving AD logoff messages directly from the Domain Controllers as part overall logoff detection, or is WMI logoff detection currently only supported through the use of Endpoint Probes and Passive ID session timeouts?</P><P></P><P>Thanks,</P><P>Denis</P></BODY></HTML> Sun, 07 Jan 2018 00:27:43 GMT https://community.cisco.com/t5/network-access-control/wmi-passive-authentication-logoff-detection/m-p/3492039#M518779 dvan 2018-01-07T00:27:43Z Re: WMI Passive Authentication Logoff Detection https://community.cisco.com/t5/network-access-control/wmi-passive-authentication-logoff-detection/m-p/3492040#M518787 <HTML><HEAD></HEAD><BODY><P>The latter.</P></BODY></HTML> Sun, 07 Jan 2018 04:43:38 GMT https://community.cisco.com/t5/network-access-control/wmi-passive-authentication-logoff-detection/m-p/3492040#M518787 hslai 2018-01-07T04:43:38Z Re: WMI Passive Authentication Logoff Detection https://community.cisco.com/t5/network-access-control/wmi-passive-authentication-logoff-detection/m-p/3492041#M518789 <HTML><HEAD></HEAD><BODY><P>Thanks Hsing-Tsu</P><P></P><P>Are there any plans for ISE to support these messages in future?</P></BODY></HTML> Mon, 08 Jan 2018 00:55:51 GMT https://community.cisco.com/t5/network-access-control/wmi-passive-authentication-logoff-detection/m-p/3492041#M518789 dvan 2018-01-08T00:55:51Z Re: WMI Passive Authentication Logoff Detection https://community.cisco.com/t5/network-access-control/wmi-passive-authentication-logoff-detection/m-p/3492042#M518793 <HTML><HEAD></HEAD><BODY><P>By default, there are no reliable logoff events generated by endpoints that disconnect from network.&nbsp; This is why we are leveraging direct endpoint probes.&nbsp; If we were able to gather this directly from AD, we would have.</P></BODY></HTML> Mon, 08 Jan 2018 07:33:21 GMT https://community.cisco.com/t5/network-access-control/wmi-passive-authentication-logoff-detection/m-p/3492042#M518793 Craig Hyps 2018-01-08T07:33:21Z