Dear team,
customer has currently fortigate VPN SSL for remote users, so they need to authenticate and authorize based on attributes that are delivered by a NAC solution, maybe VSA attributes. Currently customer doesn't have any NAC, buy they have all switch and wifi devices with cisco (meraki for APs, and catalyst 9300/ 2960x,3650,3850,4510)
We are thinking to propose CISCO ISE as a centralized RADIUS for authentication and accounting, but we need to know up to what level of authorization CISCO ISE can perform with Fortigate VPN SSL.
if anyone has any specific documentation of the integration with fortinet vsa attributes that worked fine for the mapping it would be excellent.
thanks in advance
