topic Re: ISE DNS Setup Cloud Only workstations in Network Access Control

ISE DNS Setup Cloud Only workstations

plevine23 — Thu, 11 Apr 2024 13:27:04 GMT

I am setting up ISE in Azure for a cloud only environment. There is no on-premises infrastructure, therefore no internal DNS for lookups. I've gone through the deploy docs and can't seem to find anything regarding the DNS setup in Azure. All workstations are Azure AD joined and they use ISP for DNS. Can someone give me some guidance on setting this up please?

Thanks

Phil

Re: ISE DNS Setup Cloud Only workstations

ahollifield — Thu, 11 Apr 2024 13:49:56 GMT

ISE requires forward and reverse DNS records for all ISE nodes. What DNS provider is used for all of the other workloads in Azure? The DNS server doesn't have to be on-prem.

Re: ISE DNS Setup Cloud Only workstations

plevine23 — Thu, 11 Apr 2024 16:21:10 GMT

There are no other workloads in Azure. Everything is either office.com or a 3rd party saml integrated app.

Re: ISE DNS Setup Cloud Only workstations

ahollifield — Thu, 11 Apr 2024 17:38:11 GMT

So there is no internal DNS server? Everything is SaaS? You need a DNS server for ISE to work properly with A and PTR records for all ISE nodes.

Re: ISE DNS Setup Cloud Only workstations

plevine23 — Mon, 22 Apr 2024 11:53:10 GMT

Sorry for the delayed response, but there in no Internal DNS because there's no internal infrastructure. if what you're saying is true, then I will build a DNS server and let the ISE nodes register their A and PTR records.

Re: ISE DNS Setup Cloud Only workstations

ahollifield — Mon, 22 Apr 2024 12:06:29 GMT

Yes or use whatever DNS service the cloud service provider offers