Dear all,
If a company has two domains (example abc.com and xyz.com) with trust relationship between these AD, can we setup authorization rules on Cisco ISE for example group IT in abc.com get access to server A and group IT in xyz.com get access to server B? Is this possible? I'm trying this in my lab but it still doesn't work. I connect to abc.com in the AD configuration on ISE and from there I am able to query xyz.com user group. But if I use the xyz.com group in authorization rule, it keeps getting bypassed by ISE. but running normally with abc.com. Please help.
Regards,
Ratna
