Lab Minutes Forum
Technical Discussion => Security => Topic started by: Administrator on March 23, 2015, 08:43:50 AM
-
Hello please help me for my questions about Cisco ISE:-
1-what is the difference between NAC Agent & Web NAC Agent ?
2-when we apply NAC the devices must be under domain? yes or no.
3-Can I apply NAC for workgroup machines?
4-When the collapse of the aaa server for each reason, what I do for dot1x & MAB machines to access the network?
5-what is the policy you can apply for workgroup machines from Cisco ISE?
6-Why in Cisco ISE appliance 3495 doesn't support Inline posture node?
-
1. NAc Agent is an actual software installed on PC usually used on corporate computer while NAC web agent is temporal web-based agent running on ActiveX (I believe) and user does not require software installed, usually used for guest
2. No, NAC agent can run on any Windows/Mac regardless of domain membership
3. Yes, it is just a piece of software to install. What's more important is assigning propoer authorization profile to users.
4. Please clarify the question
5. Please explain what you are trying to achieve
6. All ISE hardware appliance supports IPEP. Please see ISE install guide
-
about question 2
under domain, i.e join domain for AD (active directory )
about question 4
when the breakdown aaa server for any reason?what do I do?
about question 5
7-What is the policy service (such as dot1x,MAB...etc) from Cisco ISE we can applying on the workgroup machines?
about question 6
We found in Cisco website the Inline Posture is not supported on the Cisco SNS 3495 platform. you can follow from here
http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/installation_guide/b_ise_InstallationGuide13/b_ise_InstallationGuide12_chapter_00.html#ID-1413-0000008c