topic Re: AD-AD1 ISE in Network Access Control

AD-AD1 ISE

sujanyakj — Fri, 13 May 2022 14:10:42 GMT

Do we have any dictionary named AD-AD1 in ISE with the attribute as ExternalGroups.

If not, please let me know how to create the custom condition in Cisco ISE release 2.4

Re: AD-AD1 ISE

Charlie Moreton — Fri, 13 May 2022 14:17:15 GMT

The dictionary is created when you create your AD Join Point and is named the same as your Join Point. To create your Condition, select the Dictionary with your AD Join Point name and choose the ExternalGroups attribute.

Re: AD-AD1 ISE

Marvin Rhoads — Fri, 13 May 2022 16:32:27 GMT

In addition to the issue at hand, please strongly consider moving to a supported version of ISE. 2.4 is long past end of sales and even past end of software maintenance now.

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/bulletin-c25-743964.html

Re: AD-AD1 ISE

Marcelo Morais — Fri, 13 May 2022 22:54:52 GMT

Hi @sujanyakj ,

1st at Administration > Identity Management > External Identity Sources, select Active Directory > select de <AD Name> > select the Groups tab > select Add, to add the AD Group.

2nd at Work Centers > Network Access > Dictionaries > select the <AD Name> > click Dictionary Attributes, you are able to check the available attributes

3rd at Policy > Policy Set, you are able to add Conditions with: <AD Name>.ExternalGroups Equals <select the AD Group that you add on 1st.>

Hope this helps !!!