Cisco ISE with Flexconnect

[Tabish Mirza]

Hi Folks,

Just want to know, how Cisco ISE works with WLC FlexConnect (AP deployed in FlexConnect Mode), if WLC goes down due to some reason. How users will get Authenticate, Authorize ? Does FlexConnect support all ISE features (like Posture, Profiling, CoA, CWA and etc) ?

[Marvin Rhoads]

In the absence of the WLC, new wireless users will not be authenticated or authorized. Existing sessions may continue and FlexConnect ACLs will remain in place.

With the WLC, all ISE features are supported (posture, profiling etc. as you asked). Without it, none of them can take place as they are all dependent on the WLC acting as the authenticator and policy enforcement point.