Lab Minutes Forum

Technical Discussion => Security => Topic started by: Administrator on October 21, 2015, 05:37:04 PM

Title: what is MAR used for in ISE? (on behalf of sherief)
Post by: Administrator on October 21, 2015, 05:37:04 PM

Please informed that i just authenticate machine against domain membership and authenticate users with domain username and password. Question is : Machine access restriction is enabled on my ISE configuration, what will happen if i disabled it.??

Title: Re: what is MAR used for in ISE? (on behalf of sherief)
Post by: Administrator on October 21, 2015, 05:39:55 PM

MAR allows machine and user authentications to be correlated. For MAR to work, you need to use "WasMachineAuthenticated" authorization condition to enforce user network access to only when they are on machine that has been authenticate (ie. domain computer). If you do not have such requirement, there is nothing you need to do. You don't really need to disable MAR.