Cisco ISE Machine Authentication

[muhammad.ali111]

Hello,

If a machine is authorized to access 2.2.2.1 machine and if some one tries to access 2.2.2.2 via 2.2.2.1, will ISE block it?

[Joseph Johnson]

Do you mean if someone connects to a machine at 2.2.2.1 via a remote session (RDP, SSH, etc.), will ISE block access to 2.2.2.2? Only if ISE is controlling network access for the machine at 2.2.2.1 to block access to 2.2.2.2.

The reason being is that if you are connected to 2.2.2.1 via a remote session your connection from there to 2.2.2.2 originates from 2.2.2.1 and not the original client.

[muhammad.ali111]

Thanks.

[muhammad.ali111]

Dear Joseph,

If there is a server(2.2.2.1) in between and device accesses that server, after that tries to connect to 2.2.2.2 so in that scenario how the ise will be deployed? 

are there going to be two ise nodes?