cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

1766
Views
0
Helpful
3
Replies
David Pease
Beginner

Cisco ISE and Fast User Switching

Greetings,

In our deployment, we are interested in utilizing the "Fast User Switching" that is contained within the Windows Functionality.   After searching for quite a while, I see that the native Windows supplicant is not compatible with Fast User Switching.   It does not appear that Anyconnect is either.   Can you please inform me as to what suppluicant I would need to research in order to allow for the User Switchign Functionality?

We are currently using ISE 1.2 Patch 4.

Thank You for any assistance.

David

1 ACCEPTED SOLUTION

Accepted Solutions
Saurav Lodh
Rising star

The  NAC Agent for Cisco ISE does not support Windows Fast User Switching  when using the native supplicant. This is because there is no clear  disconnect of the older user. When a new user is sent, the Agent is hung  on the old user process and session ID, and hence a new posture cannot  take place. As per the Microsoft Security policies, it is recommended to  disable Fast User Switching.

Source:

http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_pos_pol.html

View solution in original post

3 REPLIES 3
Saurav Lodh
Rising star

The  NAC Agent for Cisco ISE does not support Windows Fast User Switching  when using the native supplicant. This is because there is no clear  disconnect of the older user. When a new user is sent, the Agent is hung  on the old user process and session ID, and hence a new posture cannot  take place. As per the Microsoft Security policies, it is recommended to  disable Fast User Switching.

Source:

http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_pos_pol.html

Saurav,

While I appreciate the reply, you failed to answer my question.   If you re-read what I originally wrote, I was already aware that the Native Supplicant does not support Fast User Switching.  My question was if there were any other supplicants that *DO* support it.    

You basically just repeated back to me the statement I had in my initial question about the Native Supplicant.

Thank You.

Does anyone else have a reply to this?   There has to be someone who has run into this issue before...

Create
Recognize Your Peers
Content for Community-Ad

ISE Webinars


Miss a previous ISE webinar?
Never miss one again!

CiscoISE on YouTube