Dear Cisco Community,
We use ISE version 3.x both using LAN dot1x and VPN tunnel. ISE integration with AD for Authentication.
When user connect to VPN ( Cisco Secure Client ). It required to check AD user credential, PC certificate and OTP. It also check the Posture and policy we defined.
Is there another alternative solution to replace certificate with VPN? No require check certificate when user connect VPN.
If yes, how can we configure? Is it good practice or not? how about ISE security level?
If cannot do it, do we have the way to simplify from ISE admin / end users not challenge with certificate too much?
Thanks for update and supporting.
