topic Re: WMI backend changes for Easy-Connect in Network Access Control https://community.cisco.com/t5/network-access-control/wmi-backend-changes-for-easy-connect/m-p/3444074#M518804 <HTML><HEAD></HEAD><BODY><P>IRT running the agent, it can be run on any member server? I assume then it’s more of an interval based polling rather than real-time / near-time?</P><P></P><P>Brad Landrum</P><P>Systems Engineer | Cisco Systems</P><P>SNR: 1.770.236.7927</P><P>blandrum@cisco.com</P><P>https://acecloud.webex.com/meet/blandrum</P></BODY></HTML> Mon, 08 Jan 2018 13:16:11 GMT blandrum 2018-01-08T13:16:11Z WMI backend changes for Easy-Connect https://community.cisco.com/t5/network-access-control/wmi-backend-changes-for-easy-connect/m-p/3444071#M518796 <HTML><HEAD></HEAD><BODY><P>I have some questions from an Active Directory team about exactly what's happening "behind the scenes" when we enable Easy-Connect on an AD controller.&nbsp; Previously there was a script that was run, but now it's all done from the ISE GUI and it's made them very nervous about exactly what is being sent / changed.&nbsp; Can someone provide an explanation of exactly what we're doing to the AD controller when it's added in ISE as an Easy-Connect server?</P></BODY></HTML> Fri, 05 Jan 2018 19:40:06 GMT https://community.cisco.com/t5/network-access-control/wmi-backend-changes-for-easy-connect/m-p/3444071#M518796 blandrum 2018-01-05T19:40:06Z Re: WMI backend changes for Easy-Connect https://community.cisco.com/t5/network-access-control/wmi-backend-changes-for-easy-connect/m-p/3444072#M518799 <HTML><HEAD></HEAD><BODY><P>The requirements for Passive ID setup have not changed.&nbsp; We just made it simpler than having to run through steps manually:</P><P><A href="https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_01110.html#id_ADReqsIntroDenali" title="https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_01110.html#id_ADReqsIntroDenali">Cisco Identity Services Engine Administrator Guide, Release 2.3 - Manage Users and External Identity Sources [Cisco Ide…</A></P><P></P><P>The alternative is to run agent on DC or member server and you bypass the settings needed for remote access via DCOM, but core principles apply.</P><P></P><P>Craig</P></BODY></HTML> Fri, 05 Jan 2018 22:35:09 GMT https://community.cisco.com/t5/network-access-control/wmi-backend-changes-for-easy-connect/m-p/3444072#M518799 Craig Hyps 2018-01-05T22:35:09Z Re: WMI backend changes for Easy-Connect https://community.cisco.com/t5/network-access-control/wmi-backend-changes-for-easy-connect/m-p/3444073#M518802 <HTML><HEAD></HEAD><BODY><P>Adding to what Craig said, we may still either manually configure for what required or run the script ourselves, instead of using the automation by "Configure WMI".</P><P></P><P>Running a PIC agent is a good option other than that providing PassiveID only but not yet supported for Easy Connect.</P></BODY></HTML> Sat, 06 Jan 2018 18:55:12 GMT https://community.cisco.com/t5/network-access-control/wmi-backend-changes-for-easy-connect/m-p/3444073#M518802 hslai 2018-01-06T18:55:12Z Re: WMI backend changes for Easy-Connect https://community.cisco.com/t5/network-access-control/wmi-backend-changes-for-easy-connect/m-p/3444074#M518804 <HTML><HEAD></HEAD><BODY><P>IRT running the agent, it can be run on any member server? I assume then it’s more of an interval based polling rather than real-time / near-time?</P><P></P><P>Brad Landrum</P><P>Systems Engineer | Cisco Systems</P><P>SNR: 1.770.236.7927</P><P>blandrum@cisco.com</P><P>https://acecloud.webex.com/meet/blandrum</P></BODY></HTML> Mon, 08 Jan 2018 13:16:11 GMT https://community.cisco.com/t5/network-access-control/wmi-backend-changes-for-easy-connect/m-p/3444074#M518804 blandrum 2018-01-08T13:16:11Z