topic Re: Windows 10 Credential Guard with 802.1x in Network Access Control

Windows 10 Credential Guard with 802.1x

fpm2007cisco — Mon, 15 Aug 2022 19:37:05 GMT

Dear Group,

Is a Cisco ISE required to get Windows 10 Credential Guard working with 802.1x? or a CA Server with Radius is enough?

Any suggested minimum requirements will be really appreciated.

Thanks,

Re: Windows 10 Credential Guard with 802.1x

Arne Bier — Mon, 15 Aug 2022 20:23:32 GMT

Hello @fpm2007cisco

There was a discussion about this a few years back - I hope it's still relevant.

Re: Windows 10 Credential Guard with 802.1x

fpm2007cisco — Wed, 17 Aug 2022 14:31:42 GMT

Yes, I read their discussion, but it didn't answer my question. My question is about the minimum equipment requirement to setup a Windows 10 Network with Credential Guard and 802.1x using CA. Reading their comments, Apparently this is the only way to get it working. But, their discussions is on the line of using an ISE. At this moment, we don't have an ISE.

But, thank you for replying.

Re: Windows 10 Credential Guard with 802.1x

Arne Bier — Thu, 18 Aug 2022 00:45:48 GMT

@fpm2007cisco - there is no hard requirement to use Cisco ISE. Any RADIUS server will do the job. Of course we'd love you to use ISE because this is a Cisco forum 🙂 ... but if you have a Windows Server available then take a look at the NPS - it's built into Windows Server and will also do a good job. It's not the best tool to monitor and troubleshoot though. If you set it up correctly then you can just leave it running and it will do its job.

Re: Windows 10 Credential Guard with 802.1x

fpm2007cisco — Thu, 18 Aug 2022 14:02:36 GMT

Bier,

Once again, thank you for your reply. I would love to use ISE. The reason why we can't is our Network is Airgap. So, we don't have access to the Internet for the ISE to call home (Licensing) and our Managers do not want us to stand up a Cisco Server for registration.

Anyway, thanks again.