06-28-2018 05:56 PM - edited 02-21-2020 10:59 AM
Hi Friends,
I have the follow doubts , can you help me?
1-)With integration WLC,ISE and Firesight, is it possible to force a guest user to use the internet after fill the form ? And this user id appers on events logs of Firesight, not only his IP address?
2-)Is it possible with WLC and Ise, generate a voucher to temporaly user get access to Internet? To work this way, is it necessary another products, like CMX?
3-)Do you know if we configure access to guest using a voucher to navegate on Internet, is it possible to track the user id on events of Firesight?
TKS
Solved! Go to Solution.
06-28-2018 09:05 PM
Hi
Yes there's an integration between firepower and ISE. It'll use pxgrid which requires plus licenses.
This will allow you to see user and not only IP. In ise, firepower will leverage passive id.
Take a look here:
Within ISE, you have multiple way to manage guest access.
Yes you can have sponsor creating guest accounts and send their credentials over email or text. You can also do guest self registration and they'll get their credentials right away on the screen and/or receive them on their email inbox or text.
Instead of sending credentials, when a sponsor create accounts, you can also decide to print them out and then distribute to your users.
When you create a guest user it even when they create themselves their account, a guest profile is attached to them which says the number of hours and schedule when they can temporary access Internet. I recommend taking a look on Cisco community ise documentation where you'll find some documentation help.
You don't need cmx for this. Cmx is to leverage localization for example.
Does this classify your questions?
06-28-2018 09:05 PM
Hi
Yes there's an integration between firepower and ISE. It'll use pxgrid which requires plus licenses.
This will allow you to see user and not only IP. In ise, firepower will leverage passive id.
Take a look here:
Within ISE, you have multiple way to manage guest access.
Yes you can have sponsor creating guest accounts and send their credentials over email or text. You can also do guest self registration and they'll get their credentials right away on the screen and/or receive them on their email inbox or text.
Instead of sending credentials, when a sponsor create accounts, you can also decide to print them out and then distribute to your users.
When you create a guest user it even when they create themselves their account, a guest profile is attached to them which says the number of hours and schedule when they can temporary access Internet. I recommend taking a look on Cisco community ise documentation where you'll find some documentation help.
You don't need cmx for this. Cmx is to leverage localization for example.
Does this classify your questions?
06-30-2018 06:43 AM
TKS Francesco!!!
So independent the method that guest user get access provide by ISE, i can track this user id on Firesight Events?
TKs
06-30-2018 10:02 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide