Ability to have computer or user auth

[virtualpedia]

I've been told this isn't possible but want to check.  Planning to deploy ISE 2.7.   For the same SSID, is it possible to use computer auth for some clients and user auth for different clients?

For example, our domain joined windows 10 machines, I'd prefer to use computer auth.  This helps with group policy running and allows a network connection prior to windows login.   I'd like the same for domain macOS devices.... For our iPADs, they'd need user auth, as they won't have the certificate.

We don't have anyconnect client

[Mohammed al Baqari]

It is possible, you can create rules based on device profile and
authentication will be as you need. So w10 and mac profiled machines can
use machine auth.

Use device sensors on the switches to send attributes to ISE for profiling.

***** please remember to rate useful posts

[virtualpedia]

@Mohammed al Baqari 

would that require that I have Plus licensing?  I only will have base licensing to start

[balaji.bandi]

yes you need for additional requirement :

here is good license document explained - what feature cover based on the model

https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/security/ise/1-4/admin_guide/b_ise_admin_guide_14/b_ise_admin_guide_14_chapter_0111.html.xml

[thomas · Accepted solution]

Both are easily possible.

See ISE Authentication and Authorization Policy Reference > Microsoft Active Directory Groups Authorizations for examples of each.