authentication authorization with VDI

[mpeeters]

I am looking for Cisco’s best practices around providing authentication/authorizing solution similar to ISE for physical, but how do we do that for VDI environment?  

Do we have any documents, white papers, or suggestions ?

Thx

[paul]

What are you asking for best practice on?  Authenticating the VDI thin clients?

[mpeeters]

Yes I believe this is the context for the requester.

Regards

[paul · Accepted solution]

If you are talking about the thin clients then you have two options:



1) You can look at the thin client and see if they support 802.1x.

2) Use profiling (usually DHCP attributes, MAC OUI and/or NMAP data) to identify the devices.



Most times #1 is not worth the trouble as you can easily craft a DACL to limit the thin client access. The thin clients should only need access to the VDI server farm plus a few other things so the DACL should be very concise.

[mpeeters]

Yes I believe this is the context being asked about.