07-01-2019 10:52 AM
Hello all,
I have a simple question and hope there's a simple answer/solution to my question. I was wondering if the configuration for iPSK with ISE can use an Endpoint IDG instead of individual MAC addresses for each client part of the iPSK policy set?
Thanks!
Solved! Go to Solution.
07-01-2019 11:29 AM
yep, endpoint identity groups are usable in the conditions section of your iPSK policy. I only use groups in my policies, even if it's a single device.
07-01-2019 11:29 AM
yep, endpoint identity groups are usable in the conditions section of your iPSK policy. I only use groups in my policies, even if it's a single device.
07-01-2019 12:01 PM
Thanks! I actually just tested it out prior to your reply and confirmed endpoint IDGs work for iPSK. I like using groups as well because you never know when you'll be adding to it. It makes your policy clean and simple.
Thanks again!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide