05-02-2018 10:26 AM
Two questions:
Thank you.
Solved! Go to Solution.
05-02-2018 01:33 PM
1. It will depend on whether transition from first user to second user forces a new authentication (Which will force ISE to re-posture the endpoint). Assuming this is a Windows workstation and doing 802.1X machineOnly authentication then users logging in and out would not cause re-posture. However, if you are doing 802.1X machine+user or userOnly, then you would be re-postured as you transition from user1 to user2. You may also need to disable fast-user-switching to force user logoff from the first user to make it work.
2. I don't know of any performance numbers for AC/CM download on ISE however, if you have concerns on performance impact to ISE, you can craft additional Client Provisioning Policy to deploy AC/CM updates to subset of users and update users in a phased approach. You could create matching Windows AD group where only 100 of 1600 users are in for initial AC/CM update then add next batch of users to the group until all 1600 users are in the group and updated.
05-02-2018 01:33 PM
1. It will depend on whether transition from first user to second user forces a new authentication (Which will force ISE to re-posture the endpoint). Assuming this is a Windows workstation and doing 802.1X machineOnly authentication then users logging in and out would not cause re-posture. However, if you are doing 802.1X machine+user or userOnly, then you would be re-postured as you transition from user1 to user2. You may also need to disable fast-user-switching to force user logoff from the first user to make it work.
2. I don't know of any performance numbers for AC/CM download on ISE however, if you have concerns on performance impact to ISE, you can craft additional Client Provisioning Policy to deploy AC/CM updates to subset of users and update users in a phased approach. You could create matching Windows AD group where only 100 of 1600 users are in for initial AC/CM update then add next batch of users to the group until all 1600 users are in the group and updated.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: