ISE Machine authentication

eng.malak — Mon, 11 Mar 2019 05:01:08 GMT

i enabled machine authentication for windows machine but i have some MAC OSX laptop that authenticate with MS AD that i need to exclude form MAR , i tried to apply specific auhz policy but every time it fails because of MAR , any idea ?

One way you could do this is

nspasov — Wed, 17 Sep 2014 00:44:06 GMT

One way you could do this is to utilize profiling. You can then create a policy that authorizes MACs without forcing them to go against the MAR check.

On the other hand, if your MACs are joined to your domain then you can eliminate MAR and simply perform PEAP (machine) based authentication for both your MACs and Windows machines.

You could also create a special rule for MACs that authenticate via PEAP (User) based authentication

Hope this helps!

Thank you for rating helpful posts!

topic ISE Machine authentication in Network Access Control

ISE Machine authentication

One way you could do this is