ISE 2.4 Easy Connect

[fatalXerror]

Hi Guys,

I am looking for a good document that states the supported ISE features if I deployed it as an EasyConnect but I cannot see any over the internet.

I would like to know if I can do the following if I will be using EasyConnect,

- Certificated-based authentication (either machine or user)?

- Posture Assessment?

- Dynamic VLAN Enforcement?

- What is the difference between the full 802.1x compare to EasyConnect in terms of security?

Thanks

[Rob Ingram]

Hi,

Essentially EZC uses MAB and will gather user login details from AD from the windows event logs via WMI, therefore it does not do certificate authentication. Yes, you can do dynamic VLAN assignment (it's just authz) and I'm pretty sure you can do Posture assessment.

This Cisco guide is useful

HTH