topic Re: What will be the impact if Cisco ISE is not working or down ? in Network Access Control

What will be the impact if Cisco ISE is not working or down ?

Network_Sarovani — Tue, 08 Feb 2022 16:04:39 GMT

Hello Team ,

what happens if the CISCO ISE is non functional ? What happens to the end device authentication?

Re: What will be the impact if Cisco ISE is not working or down ?

Mark Elsen — Tue, 08 Feb 2022 16:09:17 GMT

- The idea of ISE is to provide network authentication , if down then devices will not be able to go on the network.

Re: What will be the impact if Cisco ISE is not working or down ?

Network_Sarovani — Tue, 08 Feb 2022 16:17:26 GMT

It means devices which uses ISE for authentication will not work ..

Example : PC which is connected to L2 switch on which NAC is enabled on the port will not be functional ..Meaning user will not be able to communicate with other devices .

Re: What will be the impact if Cisco ISE is not working or down ?

balaji.bandi — Tue, 08 Feb 2022 16:41:14 GMT

If you distributed environment, they fall back to other ISE, of not Device Authentication fail back to Local account ( device authentication i take this as device admin) - not end device right ?

Re: What will be the impact if Cisco ISE is not working or down ?

Rob Ingram — Tue, 08 Feb 2022 17:01:01 GMT

@Network_Sarovani I assume you are referring to 802.1x RADIUS authentication?

It depends what you have configured. Use the Inaccessible Authentication Bypass (IAB) feature, also referred to as critical authentication. When configured the switch grants temporary network access to the host and puts the port in critical-authentication state, which allows devices connecting to the network whilst the RADIUS servers are down to gain network access.

https://community.cisco.com/t5/security-documents/ise-secure-wired-access-prescriptive-deployment-guide/ta-p/3641515#toc-hId-1018207729

Re: What will be the impact if Cisco ISE is not working or down ?

Network_Sarovani — Thu, 10 Feb 2022 12:48:59 GMT

End device = PC wired/wireless ,printer, network switches etc