How do I add SecureGateway to Cisco ISE 2.4 using RADIUS?

[John_Ejaife]

I'm having trouble adding a Checkpoint firewall to ISE 2.4. I've been following a blog where the author claims to have successfully added it to ISE 2.1, (here http://mdtnets.blogspot.com/2016/07/checkpoint-gaia-radius-authentication.html).

In the part where he gets to "Authentication Policy" I assume it's been replaced by Policy Sets. Running into trouble setting up the conditional "If DEVICE:Device Type Equals Device Type#All Device Types#Checkpoint"

I can do the"if DEVICE:Device Type Equals: All Device Types" but am not given an option for any other parameters. Am I missing something here?

[G_W_Albrecht]

I think you ask questions concerning Cisco Configuration - but all i know is sk105542...

[Nüüül]

Hi,

Device Type "checkpoint" is not there by default. This has to be configured manually. (Out of the head Administration -> Network Resources)

More or less you only enter the IP Address of the Firewall and are then able to differentiate, who is sending the request.

More:

Cisco Identity Services Engine Administrator Guide, Release 2.4 - Manage Network Devices [Cisco Iden... 

Daniel

[John_Fleming]

John Ejaife (of Spikefish Solutions fame) just wrote up a complete walk through on this. This covers Cisco ISE 2.4 and shows creating a admin role and a noc role. Access is controlled via group membership in active directory.

Checkpoint + ISE + Active Directory integration

[PhoneBoy]

I probably should have moved this thread into Appliances and Gaia‌ awhile ago

[Enyi_Ajoku]

Will this be the same steps on vsx. Particular for the NOC

Just asking as Web Access is disabled when VSX is enabled