topic Re: ISE Posture External DataSource Condition how-to ? in Network Access Control

ISE Posture External DataSource Condition how-to ?

ESANetwork — Fri, 04 Sep 2020 11:09:26 GMT

Hello,

In Cisco ISE 2.6, the “Posture External DataSource Condition” feature has been introduced, anyway the ISE documentation does not contains any configuration guide for it.

Also the hints provided hovering the mouse over the “Info” label are not clear enough.

For “Device Id” the hint says: “Endpoint will be identified using AnyConnect UDID stored in this attribute”. Should I put here the “Computer object attribute” used to store the UDID in the AD ?

For “Expression” the hint says: “Condition specified below will be used to match common name to endpoint UDID.” This totally obscure to me, I would have expected an expression among various “Computer object attributes” used by ISE to derive the Compliance Status.

Has anyone experience on that ? I've searched in the doc/forums and Internet without luck.

Thank you,

Stefano

Re: ISE Posture External DataSource Condition how-to ?

Mark Elsen — Fri, 04 Sep 2020 11:15:28 GMT

- https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvo08406

(which may clarify this particular functionality).

Re: ISE Posture External DataSource Condition how-to ?

ESANetwork — Fri, 04 Sep 2020 11:36:29 GMT

Hi Marce1000,

but the mentioned bug has been fixed in the version I use and indeed the field "active directory" has been renamed in "AD Join Point" as per bug fixing request.
Thanks,

Stefano