07-10-2018 01:56 PM
Hi,
I'm trying to create a authorization policy using an active directory OU (both user and machine objects). But I'm unable to the OU to ISE. It only allow security groups. Please advise.
Solved! Go to Solution.
07-10-2018 04:00 PM
It's not recommended to use OU, which is not indexed, so would result in poorer performance.
If you have to use it, then you may write conditions on the AD attribute "distinguishedName"
11-07-2019 06:53 AM
Join ISE to Active Directory. Then add whatever groups you want to use into ISE. At that point, then you will be able to use the AD groups in your authorization policies.
07-10-2018 04:00 PM
It's not recommended to use OU, which is not indexed, so would result in poorer performance.
If you have to use it, then you may write conditions on the AD attribute "distinguishedName"
11-07-2019 02:26 AM
How do I create Authorization Policy using Active Directory Security Groups? Thanks.
11-07-2019 06:53 AM
Join ISE to Active Directory. Then add whatever groups you want to use into ISE. At that point, then you will be able to use the AD groups in your authorization policies.
11-07-2019 05:31 PM
I could see the option for OU 'CERTIFICATE Subject - Organization Unit'
Which option is for Active Directory Security Policy to add the groups?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide