topic Re: ISE - Separate database for each site in Network Access Control

ISE - Separate database for each site

NetfastProjectAdmin48133 — Fri, 20 Sep 2024 16:17:26 GMT

We have to manage 1000s of sites & have a workflow whereby we want one admin per high school to be able to add devices using their mac addresses.

But there is a requirement that each site's admin should keep a separate DB of registered mac addresses, without seeing the other site's registered devices.

These devices should then authenticate on wire with MAC auth.

Is this database separation & invisibility of other sites possible in Cisco ISE? If yes, how?

Re: ISE - Separate database for each site

Mark Elsen — Fri, 20 Sep 2024 16:52:50 GMT

- Not if your ISE is centralized with overall (centric) polices ,

Re: ISE - Separate database for each site

ahollifield — Mon, 23 Sep 2024 12:02:01 GMT

No. ISE is not designed for multi-tenancy.

Re: ISE - Separate database for each site

MHM Cisco World — Mon, 23 Sep 2024 12:06:44 GMT

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/218190-configure-ise-3-2-data-connect-integrati.html

Check this contact cisco for more info

MHM