ISE pre auth acl

[cisco8887]

Hi All,

I am trying to learn a bit more about ISE and how it works.

Am I correct assuming Pre-Auth  acl is only used when the client is not authenticated ?

Once authenticatedm is  a new acl applied depending on all permissions allowed?

is a command sent to the ise eveytime the user is sending traffic to ensure the user is authorised to send the traffic out ?

What book do you suggest for reading?

Many thanks

[nspasov]

Yes, the pre-auth ACL is there until the user/machine is authenticated and authorized. Then the pre-auth ACL gets replaced with a dACL that you push from ISE via an authorizaiton profile. The dACL remains in place until that session ends or a CoA is issued and a new policy is applied. 

For more info I recommend reading the following guides:

http://www.cisco.com/c/en/us/support/security/identity-services-engine/products-implementation-design-guides-list.html

I hope this helps!

Thank you for rating helpful posts!