ANC differences ISE 2.0 ISE 2.1

[MarkoT]

Hi everyone,

in ISE 2.0 we had more ANC actions than in ISE 2.1 :

In 2.0 we had :

     Quarantine, Remediate, Provisioning, Shut_Down, Port_Bounce

In 2.1 we have :

     Quarantine, Shut_Down, Port_Bounce

A client wants to implement the ISE so as to enable the Helpdesk to override te authorizatin in some cases ( VIP user has Authz problem for instance, so Helpdesk needs to authorize access manually ). My understanding is the ANC was made exactly to handle situations like this, yet it seems that we are missing the actions needed to have this kind of flexibility in 2.1

Can someone suggest a solution to have this kind of Helpdesk access to ISE ?

How do we solve this category of problems ?

Best regards,

Marko Tanaskovic

[Craig Hyps · Accepted solution]

You can use ANC to assign a policy which will trigger a CoA and grant authorization based on that ANC policy.  It sounds like that is what you want to achieve with ANC 2.0 and is possible in ISE 2.1.  The authorization assigned to ANC policy can be used to grant or restrict access.