- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
05-15-2019 12:23 PM
Few questions here.
Why do you need user local on the PA devices?
Why do you need those users local on the ISE box rather then allowing access from AD groups via ISE?
If the users are local then password changes are not possible when a user changes their AD password, so how does that work?
05-15-2019 01:16 PM
Hello,
In what context, i.e. the users?
Regards,
05-15-2019 01:27 PM
Yes for admin access with Cisco ISE, I have to create users local on the PA and local DB on the ISE/ACS server why cant it pass AD creds like my Cisco Devices?
05-15-2019 01:32 PM
Hello,
You should be able to. Check out this article.
Regards,
05-15-2019 01:33 PM
This one is more specific.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!