topic Does the latest version of ISE forward Radius Accounting information to remote destinations? in Network Access Control

Does the latest version of ISE forward Radius Accounting information to remote destinations?

rohenson — Wed, 30 Nov 2016 21:06:23 GMT

Does the latest version of ISE forward Radius Accounting information to remote destinations? Or does it still just send out in syslog format?

Customer is attempting RSSO with Fortinet Firewall and ISE 1.4 is performing Radius functions. Radius user attributes are not being passed to Fortinet. So Fortinet is reporting usage info by ip address not user identity.

Would an upgrade allow this to happen?

Re: Does the latest version of ISE forward Radius Accounting information to remote destinations?

Craig Hyps — Thu, 01 Dec 2016 23:23:06 GMT

No, ISE does not currently support the forwarding of RADIUS Accounting if not acting as a RADIUS Proxy. As noted, it is possible to set optional log targets for RADIUS Accounting logs, but these are not native RADIUS packets.

/Craig

Re: Does the latest version of ISE forward Radius Accounting information to remote destinations?

Eric Pineda — Wed, 31 Jan 2018 21:29:35 GMT

Hello Craig,

Sorry for resurrecting this from the dead. I understand this is currently not supported in ISE but is there any roadmap for this feature? Some Firewalls like SonicWall still don't support syslog for the IP-Username mapping so they require Radius Acct.

Thanks!

Eric

Re: Does the latest version of ISE forward Radius Accounting information to remote destinations?

Jason Kunst — Wed, 31 Jan 2018 22:02:01 GMT

Please reach out to our Product managers (internal email ise-pm@cisco.com<mailto:ise-pm@cisco.com>) to ask for a feature request