About Exsilium

Exsilium · ‎05-31-2022

Right now we use ISE to apply a DACL to the session based on AD usergroup. For instance, restricting the admin subnet from non IT staff.

Exsilium · ‎05-31-2022

I know that 🙂 The problem is Meraki MX doesnt support RADIUS Challenge and we believe there is some problem with SAML+ISE+Meraki+DUO also.

Exsilium · ‎05-31-2022

I am investigating switching the system over to SAML, as well as removing ISE from the authentication process. I believe that was put in place (way before I started) because there was no 2FA solution in place at the time. It also adds the functionality of adding a DACL based on the user group... which... has its own benefits. Not sure if I want to give up that functionality or not.

Exsilium · ‎05-26-2022

To start with, I cant find the status of our Feature Request anywhere. Months ago we, along with CDW, put in a feature request to support RADIUS Challenge. We migrated from ASA 5525-X to Meraki MX250 over the last year. One of the last items we have to migrate is our remote client VPN connections. While the MX supports AnyConnect, it does not support RADIUS Challenge. This prompts the user for the type of 2FA authentication they want, a Push, Text or Call. This means we have had to leave the EoL ASA in place, in parallel to the MX, which obviously isnt ideal. Additional item to consider is that we use ISE in the middle of all of this. If anyone knows how to make this work, please let me know, or at least direct me to where I can find the status of our Feature Request.

Exsilium

Community Record

Badges

Re: Cisco AnyConnect - RADIUS Challenge Support - Feature Request

Re: Cisco AnyConnect - RADIUS Challenge Support - Feature Request

Re: Cisco AnyConnect - RADIUS Challenge Support - Feature Request

Cisco AnyConnect - RADIUS Challenge Support - Feature Request

Cisco AnyConnect - RADIUS Challenge Support - Feature Request