Vpn and ISE

[elite2010]

Hi,

In both remoteaccess vpn and ssl vpn , how can we take advantage of ISE ?.

Thanks

[Karsten Iwen]

The ISE can be the Authentication- and Authorization-Server for your deployment.

The users enter their username/password and the ISE authenticates them based on the internal or an external Database. After authentication, the ISE sends authorization data like group-policy and/or ACL to the ASA for the VPN-session.

[nspasov]

To add to what Karsten and Peter said: One thing to note here is that if you are doing certificate based authentications then you will need to do this on the ASA as it is not supported on ISE. Or I should say that there are no EAP-based VPNs AFIK :)

[Peter Koltl]

Using Cisco ISE as a generic RADIUS server

https://ltlnetworker.wordpress.com/2014/08/31/using-cisco-ise-as-a-generic-radius-server/