12-20-2024 04:20 AM
We are trying to decide between ODBC and AD for our external DB.
We are familiar with AD, but not with ODBC.
Does the integration between ISE and ODBC work well?
We would be grateful to know your experience.
Solved! Go to Solution.
02-11-2025 06:55 PM
Cisco ISE does not support encryption with ODBC. |Hence, ODBC connections are not secured
12-26-2024 02:52 PM
It depends what your use case is.
AD has one major advantage over all the other methods (LDAP/ODBC) with regards to password protocol support. If you are doing simple PAP password checking (password string comparison), then AD/LDAP/ODBC are equivalent. But as soon as you need CHAP or MSCHAP protocols, then AD (and ISE internal user accounts) are the only option.
If however, your use case involves looking up records in an existing ODBC database (e.g. a warehouse system, or a hospital patient record system) then ISE integration certainly works well. It's been a while, but you'll need to write some SQL stored procedures on your SQL back-end, and then ISE can call those procedures, and process the returned data, and map the results to ISE attributes, that you can use in the Authorization Policies. I find it quite tricky and fiddly, because I am not well versed in SQL - but you can find enough tips on web searches to make something happen.
Many years ago there was a bug in ISE that prevented the successful fail-over from SQL server 1 to server 2 (if you provided two servers) - but I am sure that bug is resolved - but it would be worthwhile checking that the HA works as expected.
02-11-2025 06:55 PM
Cisco ISE does not support encryption with ODBC. |Hence, ODBC connections are not secured
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide