Cisco NAC Migration to ISE 2.0

[Arif Prasla]

Hello, Currently, In my environment I have Cisco NAC appliance which is being used to authenticate and admit users into our network via NAC agent thus preventing unauthorized host devices on the network.

Due to the site slow network connection and prolong loss communication, I am looking for solution in ISE which will authenticate the users transparently when users is logged into the network via windows credential with minimal load/configuration on the downstream switches.

Any solution and direction is highly appreciated.

Thank You

arif

[Timothy Abbott]

If your WAN is slow and suffers frequent connectivity issues, I suggest having a PSN and domain control located at the site. This will allow authentication to still occur even if the WAN is experiencing issues. This will also allow you to continue to do posture assessment since AnyConnect will also be able to communicate with the local PSN.

Regards,
-Tim