Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ISE Policy

hi experts
i need your help regarding below

I'm new in ISE , I configured the ISE to be integrated with the active directory , so any user want to login to the network should has username & password at the active directory .

most of the users already joined to the domain , and no problem with them .
my problem begin with the users whom not joined to the domain , they are login locally at them PCs , and use the active directory username & password to login to the network ....

how could i configure a policy to prevent the users to access to the network if they are not joined to the domain and put them in the quaranty vlan

thanks in advanced for any suggestion


New Member

ISE Policy

In the POLICY - AUTHORIZATION check if you have DEFAULT PERMIT at the end, or paste screen shot from Authentication (OPERATIONS - AUTHENTICATIONS) of that users to see what policy they matched.

hope to help