AAA protocols - it uses RADUIS Protocol for Authentication, Authorization and Accounting. ISE NAC and WLC uses RADUIS protocol to communicate with each other.
Authentication protocols – It supports various types of authentication protocols. PAP, MS-CHAP, EAP-MD5, PEAP, EAP-FAST, EAP-TLS.
Access control – it provides wide range of access control mechanism like - URL Redirect, Vlan Assignment, downloadable access control lists dACLs), and SGA tagging.
Posture – ISE verifies endpoint’s posture assessment via either a NAC-client-Agent or web agent. An admin can configure various kinds of posture conditions like – latest OS patches, Antivirus etc.-
Profiling – Profiling is for identifying and analyzing end-points in the network, end-points can be any device in the network which try to access network like – iPhone, iPad, laptop, printers etc. ISE comes with several pre-defined profiles for end-points. We can also create our own and we can define specific authorization policy to those profile.
Policy model – policy model offers attributes and rule based policies for creating flexible and more specific access control policy.
Guest lifecycle management - this feature is used to create a lobby admin, in ISE terminology, it is called sponsor user who can create login credentials for guest user.
Platform options - ISE available as a physical or virtual appliance. It can also be installed on VMware.
Monitoring, Troubleshooting and Reporting are easy and user friendly.
I just set up a mobility express network in my home consisting of three 1815w APs.
Network works great, all laptops, macs, TVs, xbox, etc are seeing 400mb/s as expected...
The newer (X & Xr) iPhones in the home refuse to conne...
Hi, We have a 2504 with HA sku and doesn't have a purpose for it and now we're thinking of re-purposing it. My question is, is it possible to install an AP adder license to a 2504-HA and will the HA in the sku go away after? Thanks in advance.
I have a very weird issue with a specific office. My users are not able to connect to my corporate SSID. Wireshark shows that there is no communication between AP and laptop with security turned onLaptop works fine connecting to my guest account with...
I would like to use IPSK and I undestrood it works like this:-I will configure one only common SSID-user who will connect to IPSK_SSID and use PSK_123 will be connected to VLAN 123-user who will connect to IPSK_SSID and use PSK_456 ...