topic Re: Custom NDG Use in Posturing in Network Access Control

Custom NDG Use in Posturing

paul — Thu, 27 Oct 2016 21:36:57 GMT

In our ISE installs we use a custom NDG called Stage to allow us to move from monitor mode to authentication mode on a wired deployment. This custom NDG works perfect in this scenario. The issue with custom NDGs is for some reason ISE doesn't let you utilize these NDGs in all all places. The classic example is in the posturing rules. If you try to specify a device condition the only options you have are Type and Location. The custom NDGs don't show up.

When we roll out posturing we want the option to the same type of a roll out, i.e. have the compliance set to monitor initially then mandatory. If the custom NDGs were supported in the posturing rules we could use them to easily create a monitoring and enforced rule base.

Has this been discussed as a road map item?

Thanks.

Re: Custom NDG Use in Posturing

Timothy Abbott — Fri, 28 Oct 2016 16:19:47 GMT

Hi Paul,

We can't discuss roadmap items in this public forum. Please work with the Cisco account team to get more information.

Regards,

-Tim

Re: Custom NDG Use in Posturing

paul — Fri, 28 Oct 2016 20:02:47 GMT

I should have asked this a different way. Is this a known issue that already has a feature request for it?

Paul Haferman

Office- 920.996.3011

Cell- 920.284.9250