Drive mapping during posture remediation

[sudheere]

I am doing ISE (1.1.1) deployment for client. The customer is using AD logon script do do drive map to a nas server. My posture remediation acl is blocking drive mapping unless I use 'permit ip any any' which is a security hole. My acl should be modified to allow the drive mapping during unknown/posture-remediation interval. Could any one suggest if you have faced similar issue.

[akolitsos]

You need to permit access to your domain controllers during posture remediation and add a delay to your logon script -

http://www.cisco.com/en/US/products/ps6128/products_configuration_example09186a0080a70c18.shtml

[Tarik Admani]

Hi,

I depolyed the same ACL and typically if you allow the ports you will not see the drive mapping issues. Just make sure you are not flipping vlans around or you will run into issue just as this, unless you choose to run login scripts.

Thanks,

Tarik Admani
*Please rate helpful posts*