ISE 2.0 - AD Integration

[Mostafa.Ragab]

Hello All,

I have an Active directory server on a cloud. Can it be integrated with Cisco ISE 2.

                       Thanks in Advanve

                                 Mostafa

[Marvin Rhoads]

Yes. As long as the ISE nodes can communicate with the AD server(s) via the required ports and protocols. The ISE Installation Guide appendix lists those ports.

[Mostafa.Ragab]

So, Should I NAT the ISE IP to communicate with the AD using the nated IP or it's better to install a site-to-site VPN between the cloud and my network?

[Marvin Rhoads]

If you go straight LDAP (tcp/389), it will not be encrypted. For that reason, an external (to your site) LDAP server might be better reached via a VPN tunnel.

Here's the reference for the ports used:

http://www.cisco.com/c/en/us/td/docs/security/ise/2-1/install_guide/b_ise_InstallationGuide21/b_ise_InstallationGuide21_appendix_0110.html

The one Ravi posted earlier was specific to Microsoft Intune (their MDM solution).

[Ravi Singh]

Here is the Doc

https://docs.microsoft.com/en-us/intune/deploy-use/restrict-access-to-networks