Hi
FYI,
An authentication policy consists of the following:
• Network Access Service—This service can be one of the following:
– An allowed protocols service to choose the protocols to handle the initial request and protocol
negotiation.
– A proxy service that will proxy requests to an external RADIUS server for processing.
• Identity Source—An identity source or an identity source sequence to be used for authentication.
After installation, a default identity authentication policy will be available in Cisco ISE that will be used
for authentications. Any updates to the authentication policy will override the default settings.
The following is a list of protocols that you can choose while defining your authentication policy:
• Password Authentication Protocol (PAP)
• Protected Extensible Authentication Protocol (PEAP)
• Microsoft Challenge Handshake Authentication Protocol Version 2 (MS-CHAPv2)
• Extensible Authentication Protocol-Message Digest 5 (EAP-MD5)
• Extensible Authentication Protocol-Transport Layer Security (EAP-TLS)
• Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling (EAP-FAST)
• Protected Extensible Authentication Protocol-Transport Layer Security (PEAP-TLS)
By default, the identity source that Cisco ISE will look up for user information is the internal users
database.
