topic Re: ISE issue with RDP in Network Access Control

ISE issue with RDP

Wei Chen — Mon, 25 Apr 2016 18:02:38 GMT

We deployed ISE 1.4 to wired network and are using windows native 802.1x supplicants to do both user and machine authentication. The problem is when we RDP into the PC that are connected to 802.1x enabled switch ports, connectivity issues, and session failures and disconnection issues could happen. Currently we are using machine authentication only in order to temporarily fix this RDP issue.

So we would like to know if there is a work around to fix this RDP issue if we still want to use windows nativee 802.1x supplicants to do both user and machine authentication, NOT using Cisco AnyConnect Secure Mobility Client with Network Access Manager – NAM module.

Re: ISE issue with RDP

Jason Kunst — Mon, 25 Apr 2016 18:11:41 GMT

Windows native supplicant doesn't handle this well as you're switching between users/authentications, that's why Anyconnect NAM is recommended and designed to work around this issue, see explanation here.

Cisco AnyConnect Secure Mobility Client Administrator Guide, Release 3.0 - Communicating User Guidelines [Cisco AnyConne…

There are articles out there complaining about this. here is example. Cisco has come up with a fix with its supplicant. Not sure what else to say..

http://www.techsupportforum.com/forums/f139/rdp-with-802-1x-machine-and-user-authentication-845922.html

Re: ISE issue with RDP

vaguirre17 — Thu, 13 Aug 2020 16:29:15 GMT

Hello, I have this issue but when I issue posture.

The endpoint is compliant and when the user tries the remote desktop could login and seconds after goes to a unknown status.

Running 2.6 patch 6

Re: ISE issue with RDP

laurathaqi — Tue, 29 Jun 2021 08:51:42 GMT

Hi @vaguirre17 ,

Did you find and fix for your problem? Seems that I am running on the same issue.

Thank you,

Laura

Re: ISE issue with RDP

engineer467 — Mon, 03 Jan 2022 02:43:58 GMT

Hi All,

Did you find a fix??

Thanks.

Re: ISE issue with RDP

laurathaqi — Wed, 12 Jan 2022 10:33:26 GMT

Hi @engineer467

The only way out is to use AnyConnect Client. Otherwise its a limitation of Microsoft that cant be solved.

Best wishes,

Laura

Re: ISE issue with RDP

engineer467 — Mon, 28 Feb 2022 06:14:52 GMT

Hello Laura,

Thank you for the reply.

I tried using NAM with anyconnect client. Now RDP works ok, but some users are facing network connectivity issues (Anyconnect tries to authenticate but fails after some time).