CWA -Differentiate between domain and stanalone assets.

[sudheere]

I am implementing ISE (1.1.1) for an larg   organization. I am using IEEE802.1x   computer auth for Domain joined computers and  CWA for Non-domain computers(AD/domain user and guest user).  Posture policy is defferent for domain and non-domain computers. I want to make CWA as fallback method for domain computers. Which attribute/condition can I use to defferntiate a domain and non-domain asset/computer if the user login with CWA.

[Tarik Admani]

Hi,

You can leverage the MachineAccessRestriction feature. Look for the condition or attribute "was machine authenticated" that should let you know that a domain asset authenticated to the network. Also you can use anyconnect NAM or a group policy to set the domain issued workstations to use computer and user authentication.

Thanks,

Tarik Admani
*Please rate helpful posts*