cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
683
Views
0
Helpful
3
Comments
Hung_lin
Level 1
Level 1

Unable to integrate cisco ise 2.6 tacacs authentication with forcepoint, it will be rejected畫面截取 2020-09-16 下午4.51.52.jpg

3 Comments
balaji.bandi
Hall of Fame
Hall of Fame

I have not deployed or tested your device, but i do have other 3rd party using radius authentication with ISE / ACS.

 

As per your message you are trying to use radius authentication using ISE with LDAP ?

 

here for your product :

https://help.stonesoft.com/onlinehelp/StoneGate/SMC/6.3.0/GUID-26D7F914-2335-4D52-BE07-869BD6D165FD.html

 

example guide :

 

https://community.cisco.com/t5/security-documents/ise-device-administration-using-tacacs-and-radius/ta-p/3621655

 

Hung_lin
Level 1
Level 1

Currently forcepoint integration ise uses radius token for identification, but the log shows as follows
S__33243202.jpg

Arne Bier
VIP
VIP

Looks like the user account was not found in AD. Have you performed a manual lookup in ISE to see whether you can authenticate that user in AD? Go to External Identity Sources, select the AD Join Point and then select one of the ISE nodes, click Test user and give it a go.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: