Ask the Expert: BYOD with Identity Services Engine

[ciscomoderator]

with Cisco Expert Bernardo Gaspar

Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about Identity Services Engine (ISE) and its various usage scenarios and integrations such as BYOD, Active Directory, profiling, posture and radius authentication with Cisco subject matter expert Bernardo Gaspar.

Bernardo Gaspar is Customer Support Engineer at the Technical Assistance Center at Cisco Europe especialized in wireless and authentication, authorization, and accounting (AAA). He has been troubleshooting wireless networks, wireless management tools, and security products, including Cisco Secure Access Control Server, NAC and Identity Services Engine as part of the escalation TAC team since 2007. He also focuses on filing technical and documentation bugs. Bernardo Gaspar holds a degree from the University of Porto.

Remember to use the rating system to let Bernardo know if you have received an adequate response.

Bernardo might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the Security sub-community, AAA, Identity and NAC discussion forum shortly after the event.

This event last through Friday July 12, 2013. Visit the community often to view responses to youe questions of other community members.

[milton oliveira vieira]

Hi Bernado, I hope you're very well.

So, I'd like to know if I can achieve any level of BYOD using Cisco ISE 3315 with Basic License.

Thank you!

[Bernardo Gaspar]

Hi Milton,

If by BYOD you mean automatically enrolling and provisioning different kinds of devices, then no. With a base license you wouldn't be able to profile the clients nor automatically provision them.

If you mean bringing a personal device to the corporate environment, manually configuring it to access the network and using ISE as an authentication server, then the base license would be enough.

From the ordering guide:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5712/ps11637/ps11195/guide_c07-656177.html

---snip---

Advanced license features include device onboarding and provisioning, device profiling, posture services

---snip---

Thank you and best regards,

Bernardo

[pathfindertech]

Hi Bernado,

            We are having CVP4.0(2) for our VOIP Communications, which Cisco has announced End of Life.

            We are having CCM version 7.1 and Unity VM 4.0.

            Now we need to upgrade our CVP to latest version , Please advice what will be the best solution to upgrade and renew our contract.

Thanks

[Bernardo Gaspar]

Hello Syed,

This thread is for questions regarding ISE, which is a AAA server. I'd suggest either trying the voice tech forums or contacting your local Cisco partner or Cisco sales team for alternatives.

Thank you and best regards,

Bernardo

[nurullahkazar]

Hello Bernardo,

I've wondering how we can solve MAR time issue?

If we use machine authentication in authorization policies and client does not shut their computers within the MAR time, it will be a problem.

Only way I know to prevent this is AnyConnect NAM module but if customer does not use this, we can not find any solution.

How we can proceed?

Thank you.

Nurullah Kazar