Issues in PEAP Authentication--Cisco ISE

[afsal abdul gafoor]

Dear Community,

We are facing issues in the below setup.

                                             PEAP

clients--} WLC ---Cisco ISE---AD

                                            MSCHAPv2

We have used Private CA certificates to all our local machines and its getting authenticated using validate certificate options in windows property. In this scenario, if users trying there on BYOD devices also with domain account , its getting authenticated.

Kindly help us how to get rid of that ,and our requirement is to achieve windows/AD based authentication with certificate.

[afsal abdul gafoor]

Arnie,

The SSID is a global office requirement , where we dont have any control or we are not the decision making authority .SSID for the client settings is as I showed earlier and we cannot make any changes in the authentication hence we have oblige only PEAP.