CISCO ISE

[Dannyz8703]

I am deploying a CISCO ISE and i'm not sure about the following, i would appreciate if you guys can enlighten me 

Q1 - When each time client connect to wifi, after the first time authentication pass. When next time client reconnect to wifi, does the ISE require to check user credential with AD again or ISE will authorized user wifi connection without checking with AD anymore since ISE already store user information within the ISE ?

Q1 - When user connect LAN network every time, does user require to keyin user credential ( username & password ) or It can set only keyin one time so that the next time user connect to LAN again it will get internet access without keyin user credential anymore.

AD
Q1- When i have integrate with multiple AD, does it will require client to take longer time to complete the authentication process ?

[nspasov]

Hi there! Here are my answers:

Q1: You control this with the session timeout value located under "WLANs > Name of your SSID > Advanced > Enable Session Timeout"

Q2: Yes, when the client disconnects  an EAPOL-Logoff message will be sent. Thus, when the client re-connects, it will have to present its credentials again. 

Q3: No, integrating ISE with multiple AD domains will not cause longer authentication process. 

Thank you for rating helpful posts!