cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
816
Views
2
Helpful
3
Replies

Does the latest version of ISE forward Radius Accounting information to remote destinations?

rohenson
Level 5
Level 5

Does the latest version of ISE forward Radius Accounting information to remote destinations?  Or does it still just send out in syslog format?

  1. Customer is attempting RSSO with Fortinet Firewall and ISE 1.4 is performing Radius functions.  Radius user attributes are not being passed to Fortinet.  So Fortinet is reporting usage info by ip address not user identity.

Would an upgrade allow this to happen?

1 Accepted Solution

Accepted Solutions

Craig Hyps
Level 10
Level 10

No, ISE does not currently support the forwarding of RADIUS Accounting if not acting as a RADIUS Proxy.  As noted, it is possible to set optional log targets for RADIUS Accounting logs, but these are not native RADIUS packets.

/Craig

View solution in original post

3 Replies 3

Craig Hyps
Level 10
Level 10

No, ISE does not currently support the forwarding of RADIUS Accounting if not acting as a RADIUS Proxy.  As noted, it is possible to set optional log targets for RADIUS Accounting logs, but these are not native RADIUS packets.

/Craig

Hello Craig,

Sorry for resurrecting this from the dead. I understand this is currently not supported in ISE but is there any roadmap for this feature? Some Firewalls like SonicWall still don't support syslog for the IP-Username mapping so they require Radius Acct.

Thanks!

Eric

Please reach out to our Product managers (internal email ise-pm@cisco.com<mailto:ise-pm@cisco.com>) to ask for a feature request

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: