About RaymondBrown1165

RaymondBrown1165 · 08-20-2020

I have two standalone ISE appliances, one on ISE 2.2, the other on ISE 2.7 (Not in a cluster). I'm trying to replace my ISE 2.2 with the ISE 2.7 appliance. They are both setup identically with 802.1x using Peap(EAP-TLS). Both have certs issued from...

RaymondBrown1165 · 07-24-2019

I'm looking for a way to create a kind of quarantine for remote vpn users on the ASA. The goal is the following:1. End user opens any connect and connects to the ASA.2. VPN uses the the machine certificate to do initial authentication.3. If the ma...

RaymondBrown1165 · 07-10-2019

My scenario is for remote users. I would like to use the Always on feature in the anyconnect client to ensure that the VPN is always connected. The issue is I want to make sure the system is compliant before giving it access to network resources. C...

ISE User Identity Info · 06-28-2019

Is there an easy way to get user identity in ISE 2.1 when using machine authentication for 802.1x. My end goal is to have a IP to username mapping, and to use pxGrid to allow my WSA to grab that mapping as well. My current setup uses 802.1x Peap (Ea...

RaymondBrown1165 · 03-23-2020

That's unfortunate. Will it be something that might be added in the future?We currently use RSA for AAA and I don't think RSA has that capability. Thanks for the response.

RaymondBrown1165 · 03-23-2020

Jay, Can this be used for remote access VPN clients?

RaymondBrown1165 · 07-30-2019

This sounds like what I'm looking for. I'm not familiar with the management tunnel so I will have to do some more research and test it out. Thanks.

RaymondBrown1165 · 07-30-2019

Yes I want the authentication to be passed using the machine certificate. We can use the always on vpn to ensure that it's always authenticated, but I don't want the system to have full access while the always on vpn is on until the user logs on and...

RaymondBrown1165 · 07-30-2019

Thank You RJI. I don't think this will work for what we are trying to accomplish. What about a DAP?Is it possible to assign tunnel groups based on a dynamic access policy?

Member Since	‎05-03-2019 05:56 AM
Date Last Visited	‎03-20-2023 03:53 AM
Posts	12

User Statistics

User Activity

ISE 2.2 to ISE 2.7 - 802.1x Certificate Authentication

VPN Quarantine/limited access

ISE Anyconnect Posturing

ISE User Identity Info

Re: I know this post is 3 years

Re: I know this post is 3 years

Re: VPN Quarantine/limited access

Re: VPN Quarantine/limited access

Re: VPN Quarantine/limited access