EasyConnect and threat response

[dsheaffe@cisco.com]

Hi all

Does the use of EasyConnect for authentication limit ISE's ability to send a CoA to a NAS in response to a security threat? 

Danny

[hariholla · Accepted solution]

Hi Danny,

All the threat containment flows apply to Easy Connect sessions too. We have some use cases like ISE + Qualys and ISE + Stealthwatch working with EasyConnect in our labs. EasyConnect is essentially MAB from RADIUS standpoint and ISE can change the authorization on specific triggers. Is there a specific scenario where you think the combo wouldn't work?

-Hari

[dsheaffe@cisco.com]

Thank you Hari.  I didn't have a specific scenario in mind.  I thought it should work but just wanted to confirm. 

Danny