Government networks are quickly have to adopt 800-171 standards for multifactor access to a LAN. Is it possible to use machine authentication on a NAD ANDCaptive Portal (web auth) using ISE and the standard RSA SDI proxy? If it takes turning a L2 switch into a router on a stick that is doable. If you need a secondary Captive Portal from a Cisco device that is doable also. Please advise - This standard are to be in effect by 2018.
Just to add, AnyConnect supplicants are available but are not the preferred method to handle the redirect or re auth. Basic Machine Auth and SDI web integration is what we are looking for. Any input is appreciated. Thanks!
Take a look on the following video as a general view that probably helps you with the requirement. You can also configure the AUTHZ policies if you want webauth after machine authentication.
