topic Re: ISE EXTERNAL IDENTITY SOURCE in Network Access Control

ISE EXTERNAL IDENTITY SOURCE

Ben Bee — Thu, 17 Aug 2023 08:28:43 GMT

Hello Community

I am working 802.1x authentication using ISE. On the external identity sources I have been able to add/retrieve the domain computers group from AD but I do not see the retrieved group when trying to add it in the authorization policy condition. I only see groups that my current user account is a member of in AD. what could be reason for this.

thanks

Re: ISE EXTERNAL IDENTITY SOURCE

ahollifield — Thu, 17 Aug 2023 10:54:51 GMT

I've seen this before where the AD groups take some time to show up in the conditions studio. Log out / login back in to ISE. Also try a different browser. What version of ISE is this?

Re: ISE EXTERNAL IDENTITY SOURCE

Ben Bee — Thu, 17 Aug 2023 11:26:26 GMT

Its been days now. I am able see users groups but unable to see computer groups retrieved from AD

It's version 3.1

Re: ISE EXTERNAL IDENTITY SOURCE

andrewswanson — Thu, 17 Aug 2023 13:38:28 GMT

Can ISE retrieve groups for a given machine account using the "Test User" feature?

The is available on the "Connection" tab of the Active Directory External Identity Source:

Set Authentication Type to Lookup and enter machine name in Username box.
hth
Andy

Re: ISE EXTERNAL IDENTITY SOURCE

thomas — Thu, 17 Aug 2023 17:47:14 GMT

Make sure you click Save after selecting the groups. The should be available immediately.