ISE Integration with Microsoft Intune URL/ Source IP question

[Freemen]

Hi,

1. from the integration guide only mentioned port to open, but not mentioned what url to be permit. please advise https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01000.html#id_37138

2. from the document do not mention need open source from PAN, or PSN. can confirm what is the source?

from the slide "Intune Integration Architecture", I can see the Icon PSN, but when perform integration we are using the PAN certificate.

https://community.cisco.com/t5/security-documents/how-to-integrate-microsoft-intune-with-ise-2-1-presentation/ta-p/3619502?attachment-id=137701

please advise

[Francesco Molino]

Hi

Ports to be allowed outbound are for the Microsoft Intune URLs :

• MICROSOFT AZURE AD GRAPH API ENDPOINT
• OAUTH 2.0 TOKEN ENDPOINT

The certificate to use of the PAN. This is the one to be deployed into Azure MDM application.

Thanks