Cisco ISE Update for Microsoft Security Identifiers

Cisco ISE TME Pavan Gupta explains who needs the patch update for Microsoft SIDs and why.

🕒 Topics:
00:00 Intro and Agenda
01:29 ISE Field Notice FN74227:
https://www.cisco.com/c/en/us/support...
02:00 Slido Poll (no longer available)
05:08 Microsoft Update for Security Identifiers (May 2022):
https://support.microsoft.com/en-us/t...
06:32 Mapping Security Identifiers
08:34 Security Identifiers Stronger Mapping (When the ISE Update is Required)
09:30 Security Identifiers in Certificates (SAN field)
11:00 Impacted ISE Use Cases and Patches
ISE 3.1 P10 or later
ISE 3.2 P7   or later
ISE 3.3 P4   or later
ISE 3.4 P1   or later
14:44 Workaround with Active Directory
16:00 ISE Integration with MDM/UEM: Services and MDM Integrations
18:30 ISE MDM API Versions v2 (MAC Address) and v3 (GUID+MAC)
24:26 ISE MDM API v2 vs v3 Summary Table
25:46 Multi-MDM/UEM Support
26:56 MDM Optimizations: Compliance Cache Expiration and Polling Interval
30:47 ISE Integration with Micorosoft Intune
34:32 Intune Certificate Provisioning and SCEP
36:12 Demo: Intune SCEP Profile Configuration
38:00 Demo: ISE 3.4p1 Cert Based Authentication & Intune Compliance Check
39:39 Demo: ISE Certificate Authentication Profiles
42:07 Demo: ISE Intune Integration
45:08 Demo: MDM Policy Set
46:54 Demo: Intune & SCEP Configuration
52:30 Demo: Intune Endpoint Enrollment
58:02 Demo: ISE CAP with UPN and Device Identifiers
1:00:08 Demo: 802.1X Endpoint Certificate Authentication and MDM Verification

Resources:
Cisco ISE Software and Patch: cs.co/ise-software
ISE + Microsoft: cs.co/ise-berg#microsoft
ISE + AD: cs.co/ise-berg#ad
ISE + Intune : cs.co/ise-berg#intune
ISE Field Notice FN74227: https://www.cisco.com/c/en/us/support...
Microsoft Update for Security Identifiers (May 2022):
https://support.microsoft.com/en-us/t...