I have been investigating using CDA to get IP->User mapping, to allow us to write User/Group rules on the ASA firewalls. My server engineers do not want to apply the patches and especially the registry changes on our domains controllers. We were also looking into using ISE (for various things).
I looked at some forum posts which seemed to indicate that I might need both ISE and CDA anyway. Can anyone confirm this?
Has anyone had any issues with the Domain Controller changes needed for CDA?
Our D/Cs are Windows 2008R2, CDA is 1.0.0.011 with Patch 4.
Thanks.
Paul
