FMC and ISE integration for passive authentication

[Netgizmo86]

Hi All,

   We are implementing passive authentication using ISE ,FMC and AD. Aim is to restrict user access based on membership of AD groups. As per my understanding FMC will get user-IP information from ISE through pxGrid and will also talk with AD directly to download group information etc.  ISE need to be integrated with AD so that user mapping information can be collected using probes.

Is there a latest configuration guide I can use as a reference? 

ISE <-----------AD ------->FMC
|                                                    |
|                                                    |
|                                                    |
->----------pxGRID---------->|

Many thanks

[balaji.bandi · Accepted solution]

Look at the below thread may help you :

https://community.cisco.com/t5/network-access-control/integration-of-ise-ad-and-fmc-using-passive-identity/m-p/3556220

[Netgizmo86]

Thanks Balaji, that was helpful. If we have dedicated pxGrid server would you say it is better to have Passive ID service enabled on pxGrid server ?

[balaji.bandi]

i do not see major difference dedicated Pxgrid vs shared pxgrid, it shoud do the job as expected technically, but ever case is different.