topic Re: Cisco ISE CWA authentication with active directory in Network Access Control

Cisco ISE CWA authentication with active directory

danielesquaranti — Wed, 19 Apr 2023 13:48:24 GMT

Hi,

I want to implement the authentication via CWA portal, then authenticate the users via Active directory in the portal and place the pc on a specific VLAN based on a active directory group.

Is this possible? How?

I already setup the portal but i don't understand how to implement the policy sets in the correct way.

Thanks

Re: Cisco ISE CWA authentication with active directory

Flavio Miranda — Wed, 19 Apr 2023 15:24:31 GMT

Hello,

Take a look on this document. Might be helpful.

https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwj07_jdn7b-AhWwpZUCHfi0DQsQFnoECBMQAQ&url=https%3A%2F%2Fcommunity.cisco.com%2Fkxiwq67737%2Fattachments%2Fkxiwq67737%2Fdiscussions-network-access-control%2F537223%2F1%2FGuest%2520Portal%2520with%2520Employee%2520and%2520Guest%2520Buttons.pdf&usg=AOvVaw0cU_HiImlYJWGhOGcgoK9E

Re: Cisco ISE CWA authentication with active directory

Nancy Saini — Wed, 19 Apr 2023 17:26:48 GMT

BYOD flow meets your requirement. You can refer : https://www.cisco.com/c/m/en_uk/products/security/identity-services-engine/use-case-byod.html

To meet your second requirement of pushing VLAN based on AD group. In the BYOD compliant rule you can add another condition of AD group and push VLAN ID in the authorization profile.