Cisco ISE - Radius Accounting messages to Fortigate RSSO

[ramesh rajendran]

Hi,

Has anyone managed to crack the Cisco ISE express with Fortigate RSSO?

After authentication, Cisco ISE express supposed to send radius accounting messages to forigate RSSO. However, ISE express is sending Radius accounting packets in syslog instead of proper radius packets.

If it doesnt work, I will buy Aruba clearPass product.

thanks,

[aahumphrey]

Were you able to get this issue resolved?

[ramesh rajendran]

Nope. Evaluating clear pass now

[aahumphrey]

I am working for a new school district and they have FortiAuthenticator and ISE. I am still investigating why they are using both at the same time, but FortiAuthenticator is taking accounting messages from the Wireless Controllers, and doing RSSO that way. Hopefully I can get rid of ISE all together. 

If you like simplicity I would look into FortiAuthenticator since you have a Fortigate. Clearpass is the most universal, but that means it is a bigger headache to configure. 

Good luck, and let me know what you end up doing. :)