ISE CoA for VPN Connections

[Robertus Bleeker]

Greetings,

I have a customer with multiple ASAs in a VPN cluster. Customer occasionally requires to remove an active VPN connection and is looking for a way to accomplish this without logging into multiple ASA firewalls to locate the user connections. We are considering to propose ISE as the RADIUS AAA server as an alternative to the on-box ASDM management console… Key question is if we can send a manual CoA (disconnect or re-auth) to the ASA from ISE.

Regards,

[Gagandeep Singh · Accepted solution]

Hi, 

Yes there is an option in ISE under Operations > Live sessions.

there is a button to trigger a manual CoA, labeled "session reauthentication".

Regards

Gagan

PS: rate if it helps!!!!

[Robertus Bleeker · Accepted solution]

Thanks for confirming Gagsing3

[Gagandeep Singh]

Your welcome:).