topic Re: R80.40 SmartConsole RADIUS Integration with Cisco ISE in General Topics

R80.40 SmartConsole RADIUS Integration with Cisco ISE

LostBoY — Wed, 15 Dec 2021 13:51:59 GMT

I have configured SmartConsole users to authenticate with Cisco ISE via RADIUS protocol..for this i had to create users in SmartConsole itself and then map it to a certain authorization profile like write/ro/super user.. these then authenticate with Cisco ISE user base...however, is there anyway i do not have to create users in SmartConsole and login authentication is directly controlled via ISE ?

I have done this for Checkpoint Gateway CLI access where i dont have to create any users in CLI and they directly authenticate with ISE database.. but cant figure it out for SmartConsole users.. any help is appreciated.

Re: R80.40 SmartConsole RADIUS Integration with Cisco ISE

PhoneBoy — Thu, 16 Dec 2021 21:32:41 GMT

As far as I know, no.

Re: R80.40 SmartConsole RADIUS Integration with Cisco ISE

S_E_ — Fri, 17 Dec 2021 06:00:06 GMT

Hi,
raised the same question multiple times to our Professional Service.
There was always a "not possible with CheckPoint".
Independent which AAA service you are running on the backend, there is always the overhead to create admin accounts in SmartConsole (or API call) as well.
Regards

Re: R80.40 SmartConsole RADIUS Integration with Cisco ISE

Chris_Atkinson — Fri, 17 Dec 2021 07:05:26 GMT

I see both sides to this, specifically I have some customers that actually prefer it this way as it prevents people with AD or Radius access just provisioning themselves access to logon to SmartConsole...