topic Expand Policy Sets in ISE 3.0 in Network Access Control

Expand Policy Sets in ISE 3.0

JPara1445 — Wed, 30 Mar 2022 18:36:41 GMT

Hopefully this is a simple thing I'm missing. When I expand my Policy Set, I don't see any of the Authentication Policy or Authorization Policy lines as shown in all the examples I have seen. I thought this might be a browser issue but I have tried in Chrome, Edge, and Firefox and they all look the same.

My view looks like this:

In all the tutorials the view should look like this:

I can't figure out why I don't see those additional sections of the policy set. Thanks in advance.

Re: Expand Policy Sets in ISE 3.0

Mike.Cifelli — Thu, 31 Mar 2022 12:32:49 GMT

In all the tutorials the view should look like this:

-FYSA the GUI layout between 2.x and 3.x has a complete face lift. From a layout perspective what you see in your second screenshot will not be what you see in 3.x version so that is normal. What patch level are you running?

Re: Expand Policy Sets in ISE 3.0

JPara1445 — Thu, 31 Mar 2022 12:40:37 GMT

Just applied the latest patch a couple days ago. Current version is 3.1.0.010.

Do you know of any tutorials showing how to work with the policy sets in 3.0? Seems like everything I can find is based on 2.X.

Re: Expand Policy Sets in ISE 3.0

Mike.Cifelli — Thu, 31 Mar 2022 14:07:55 GMT

The overall workflow is pretty much the same from policy creation and components perspective. Try taking a look on YouTube there for 3.0 videos. Here are some guides that may assist too: Cisco ISE & NAC Resources - Cisco Community

Re: Expand Policy Sets in ISE 3.0

martin.fischer — Fri, 01 Apr 2022 12:58:08 GMT

Hi @JPara1445

You are not comparing the same. Your first screenshot shows a policy set which points to an external RADIUS server sequence called DuoRADIUSSequence. It seems that authentication and authorization are done by this external server(s). Therefore, there is no reason to show the authentication and authorization rules on ISE. You will find the configuration of the external server under Administration > Network Resources > External RADIUS Server and Administration > Network Resources > RADIUS Server Sequence.

Your second screenshot shows a policy set where authentication and authorization are done on ISE.

Best regards

Martin