cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
 
ISE 2.3 Patch 7 has been posted. This will be the last patch for the ISE 2.3 release!
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

211
Views
0
Helpful
3
Replies
Cisco Employee

Guest Internet Activity

Hi,

Our customer would like to map the guest user identity to their Internet activity. From older threads I understand that this is possible using the "Guest Activity Report", now replaced by the "Guest Master Report".

As I have tried to set it up without success, can you confirm that sending IP + URL logs from an ASA/WSA would be parsed by ISE and displayed in the Guest Master Report?

Secondly, is there any recommended solution for User to Web Activity mapping?

Current options I am looking at are:

- ISE Guest master report (see question above)

- SIEM

Would appreciate any proven solution for this.

Best regards

Gert

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Guest Internet Activity

There should be an example in the ISE guides, have you looked there?

Yes it’s supported as a poor mans reporting

Please be aware there are some bugs around logging of guests seen here in regards to remember me https://communities.cisco.com/docs/DOC-76415

Recommendation for more robust reporting is SIEM

3 REPLIES 3
Cisco Employee

Re: Guest Internet Activity

There should be an example in the ISE guides, have you looked there?

Yes it’s supported as a poor mans reporting

Please be aware there are some bugs around logging of guests seen here in regards to remember me https://communities.cisco.com/docs/DOC-76415

Recommendation for more robust reporting is SIEM

Cisco Employee

Re: Guest Internet Activity

Thanks for the quick reply Jason.

Do we have any recommended / proven solutions on how to integrate ISE with a SIEM – particularly on how to correlate the URL info with ISE identity?

Regards

Gert

Cisco Employee

Re: Guest Internet Activity

There is nothing documented on our side, we simply send our syslog to splunk for example and then asa would send to them as well

Up to them to correlate for A guest report

Splunk may have something