topic ISE Deployment Question (Multiple AD environments) in Network Access Control

ISE Deployment Question (Multiple AD environments)

scjackso — Tue, 18 Jul 2017 16:11:41 GMT

All,

I have a question from a customer. Currently, they are using ACS with a separate AD environment. They wanted to know if ISE can be deployed as follows: TACACS module leveraging AD1 and ISE (Endpoint Access Control and Segmentation) leveraging a separate AD environment (AD2). Is this possible?

Thank you in advance!!

Scott Jackson

scjackso@cisco.com

Re: ISE Deployment Question (Multiple AD environments)

hariholla — Tue, 18 Jul 2017 18:21:46 GMT

Hi Scott, I believe AD1 and AD2 are two distinct Active Directory domains? If yes, we can support what you are asking for. The TACACS+ authorization can happen on domain-1 and the endpoint authorizations can happen on domain-2. ISE can connect up to 50 distinct AD domains.

ISE Performance & Scale

Cheers!

-Hari

Re: ISE Deployment Question (Multiple AD environments)

scjackso — Wed, 19 Jul 2017 14:46:24 GMT

Thank you!!!