CWA with WLC Firmware 7.0.228 and ISE 1.1.1

[Pongsatorn Maneesud]

Hi,

Does Cisco ISE central web authentication supports on WLC version 7.0.228 ?

My customer has many access points which are support only for firmware code 7.0.228.

Cisco ISE version 1.1.1

WLC 5500 Series but the existing access point is cannot support to 7.3

Thanks,

Pongsatorn Maneesud

[martyn.rees]

Which AP's do they have?

[Pongsatorn Maneesud]

AP1230.

[Tarik Admani · Accepted solution]

AFter checking both the ISE and the WLC release notes it looks as if CWA with Radius NAC support was introduced in 7.2.110

WLC -

http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7_2_110_0.html#wp784178

ISE -

http://www.cisco.com/en/US/docs/security/ise/1.1.1/compatibility/ise_sdt.html#wp55038

Hope that helps.

Tarik Admani
*Please rate helpful posts*

[nspasov · Accepted solution]

Tarik is correct, you need 7.2.x and later to use CWA with ISE. Here is a general summary of features supported on ISE on 7.0 and 7.2 versions of code:

Scenarios                                                          WLC 7.0                                             7.2 

802.1X Auth                                                     Yes                                                      Yes

802.1X + Posture                                            Yes                                                      Yes

802.1X + Profiling                                           Yes                                                      Yes

Web Auth + Posture                                       No *                                                   Yes

Web Auth + Profiling                                      Inventory only *                         Yes

Central Web Auth(CWA)                               No *                                                   Yes

Local Web Auth(LWA)                                   Yes                                                      Yes

[Pongsatorn Maneesud]

Thank you so much.