RDP vs direct access distinguish on ISE

laurathaqi — Thu, 08 Jul 2021 07:39:45 GMT

Dear community,

Is there a way to distinguish RDP access form from direct access on Windows supplicants from ISE? This in order to be able to apply different rules for both use Cases.

Any though would be highly appreciated. .

Thank you,

Laura

Re: RDP vs direct access distinguish on ISE

thomas — Thu, 08 Jul 2021 14:24:08 GMT

Microsoft does not treat RDP logins as normal user logins and therefore does not trigger an 802.1X authentication event for an RDP login. The switch or wireless controller should not receive an EAP-Start message from a Windows workstation when you login via RDP.

You may consider using the Cisco AnyConnect NAM module which provides the functionality you desire.

Here is another article stating the same:

https://www.ise-support.com/2019/02/05/windows-rdp-and-802-1x-authentications/

topic RDP vs direct access distinguish on ISE in Network Access Control

RDP vs direct access distinguish on ISE

Re: RDP vs direct access distinguish on ISE