CISCO ISE

edondurguti — Fri, 21 Feb 2020 12:40:20 GMT

Hi all,

I've been playing around with ISE demo and I am very impressed!!!

After trying different scenarios with my co-workers I came to a point where we find it kind of buggy.

I have rules to redirect unknown users to pasturing through web where they download NAC CLIENT and everything works fine.

Here's the catch:

On a windows 7 machine (connecting wirelessly with built in wireless client) they are stuck on posture pending if they do the following:

They connect - open up web browser - ise redirects them to download the client they hit install and the warning about installing the client pops up - that moment the user decides to close the browser (it's most likely to happen when you have 5000+ users) - dissconnects from network and tries to re-connect again. NOW - when they open up the web browser ISE says unable to allow access to network and all that error.

So it's not letting them download the nac agent any more.. no matter what they do connect - reconnect wait 2-3 minutes nothing, only after a period of time they are able to get the NAC client installation page.

NOTE: this works totally fine on a windows xp machine with the INTEL PRO SET wireless utility.

It's not a big thing but when you have 5000+ clients and you want to introduce them to something new it will cause alot of helpdesk calls and all that you know how it goes.

Thanks in advance.

P.s I can create a short video of the whole process.

topic CISCO ISE in Network Security

CISCO ISE