topic ISE 2.2 Active Directory Authentication, Kerberos and MSRPC settings in Network Access Control

ISE 2.2 Active Directory Authentication, Kerberos and MSRPC settings

cmendezm — Mon, 11 Mar 2019 08:55:40 GMT

Hello Experts,

We have a customer that noticed latency authentications issues and we noticed that he is using MSRPC authentication. We did a manual test using the Test User option and if we use Kerberos authentication we don't get any latency messages but if we change to MSRPC we start getting latency messages.

Is there a way to configure ISE to only use Kerberos authentication and not MSRPC?

Thanks in advance.

Christian M.

Re: ISE 2.2 Active Directory Authentication, Kerberos and MSRPC settings

Mike.Cifelli — Wed, 13 Feb 2019 23:55:21 GMT

No. In order to successfully integrate ISE & AD MSRPC must be open and used. HTH!

Re: ISE 2.2 Active Directory Authentication, Kerberos and MSRPC settings

hslai — Thu, 14 Feb 2019 03:45:56 GMT

If AD used for plain-text auth (e.g. PAP-ASCII), you may enable this option [ ] Use Kerberos for Plain Text Authentications.

Otherwise, as Mike.Cifelli said, MSRPC is required.