Proxy (PAC URL) configuration in Cisco ISE

[Devendran Raju]

Hi All,

We would like to configure proxy in Cisco ISE 3.0 in our environment. We need to use proxy pac url and its port number instead of proxy IP/FQDN. We want to to integrate Azure AD as external authentication source using REST API (Https ROPC). So we need ISE communication to Azure AD and Cisco feed servers in the internet should go via proxy server.

So please let me know whether pac url based proxy configuration in ISE is possible or not? If yes, whether ISE to Azure AD communication (Https ROPC and REST API TCP/9060) will be going via proxy?

Thanks,

Devendran Raju

[howon]

ROPC is outbound and it can be proxied via proxy setting configured on ISE. ISE can't find the proxy servers via PAC file, and will need to be manually configured with proxy server IP/FQDN:Port.

REST API on TCP/9060 is inbound to ISE, though if the question is whether one can use proxy to reach ISE REST API from a client machine, then the answer is probably will work but have not been tested.