Thin Client Support with ISE

[pratigan]

We have client who has around 60% of their endpoints on thin clients & we are proposing ISE for rest of the infrastructure.

We would like to explore whether thin clients will be supported by ISE or not. We have following details of thin client from customer.

DELL

7020

HP

T5740e

T610

T620

T-620

On these Thin-Clients we have a Flash drive. On Dell Thin Client 32 GB of Flash & on HP 16GB of Flash. Thin clients do have Windows embedded OS installed with lock down mode.

Do let me know if we can do authentication for these thin clients

[Jason Kunst · Accepted solution]

It’s not a matter of ISE supporting the thin clients. We support any endpoints connecting to network with mab to start.

Recommendation would be to work with vendor to see if they support dot1x and eventually certificate authentication for best security and controls

It’s all up to endpoint software and supplicant capabilities

[pratigan]

Hi Jason,

we are talking with customer where he has more than 5000 thin clients & client needs definite answers for which we will run POC.

i would like to know whether we have any use-cases for thin clients which is already live.

[Jason Kunst]

Again this has nothing to do with ISE support of the thin clients, if they have a dot1x supplicant then will work for cases of user or machine auth with eap peap tls etc

You can also reference compatibility

https://www.cisco.com/c/en/us/support/security/identity-services-engine/products-device-support-tables-list.html

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/compatibility/b_ise_sdt_24.html#clientossupplicantsagents

Please verify with vendor os for supplicant capabilities for dot1x support

Also I googled and found some results as well

https://www.google.com/search?q=ise%20thin%20client

For reference customers you may look at listing under http://cs.co/selling-ise

[sam99]

xc

[Adam Hinchliff]

Hi Pratigan,

How did you go with this?

We have about 30 or so HP thin clients that we are looking at transitioning to ISE. 

Cheers

Adam