Cisco ISE Guest Mobility Anchor Firewall Considerations
When deploying Cisco Identity Services Engine (ISE) in today’s world, many companies want to take advantage of the guest services on offer. Cisco ISE has the ability to authenticate guest users and apply relevant controls while guests are visiting. As Cisco ISE has evolved over time, the network requirements from companies have also evolved. Companies are more conscious about network security and are constantly looking for ways to further secure their networks. With that, this often means restricting access to the corporate network if certain requirements aren’t met. By combining multiple Cisco technologies, we have the ability to segregate guests from the corporate network while still being able to allow them internet access. In summary, we can do this by deploying Cisco ISE in a DMZ and tunnelling all guest traffic to an anchor controller sat in the same DMZ. As you can imagine, designs for this sort of deployment can vary and no doubt if you’re reading this, you more than likely al...