{"id":95330,"date":"2020-09-28T07:42:51","date_gmt":"2020-09-28T05:42:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2"},"modified":"2020-09-28T07:42:51","modified_gmt":"2020-09-28T05:42:51","slug":"cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","title":{"rendered":"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/b1c271d9da09b338a0b9d8f1e5217d24.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Tere tulemast artiklite teise v\u00e4ljaandesse, mis on p\u00fchendatud Cisco ISE-le. Esimeses <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/519616\/\"><u>artiklis<\/u><\/a><\/noindex>&nbsp; oli kajastatud Network Access Control (NAC) lahenduste eelised ja erinevused tavalistest AAA-st, Cisco ISE unikaalsus, arhitektuur ja toote installimise protsess.<\/p>\n<p>Selles artiklis s\u00fcveneme kasutajakontode loomisse, LDAP serverite lisamisse ja integreerimisse Microsoft Active Directoryga, samuti t\u00e4helepanekutesse, mis on seotud PassiveID kasutamisega. Enne lugemist soovitan tungivalt tutvuda <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/519616\/\"><u>esimese osaga<\/u><\/a><\/noindex>.<\/p>\n<h2>1. Veidi terminoloogiast<\/h2>\n<p><strong>Kasutaja identiteet<\/strong> \u2014 kasutajatunnuskonto, mis sisaldab kasutajainfot ja moodustab tema mandaatide p\u00e4\u00e4su v\u00f5rku. J\u00e4rgnevad parameetrid on \u00fcldiselt m\u00e4\u00e4ratud Kasutajatunnuses: kasutajanimi, e-posti aadress, parool, konto kirjeldus, kasutajagrupp ja roll.<\/p>\n<p><strong>Kasutajate grupid <\/strong>\u2014 kasutajagrupp \u2014 see on \u00fcksikute kasutajate kogum, kellel on \u00fchine \u00f5iguste kogum, mis v\u00f5imaldab neile juurdep\u00e4\u00e4su teatud Cisco ISE teenustele ja funktsioonidele.<\/p>\n<p><strong>Kasutajatunnuse grupid \u2014 <\/strong>on eeldefineeritud kasutajagruppide kogum, mis sisaldab juba m\u00e4\u00e4ratud teavet ja rolle. J\u00e4rgmised kasutaja identiteedi grupid eksisteerivad vaikimisi, kuhu saab lisada kasutajaid ja kasutajagruppe: Employee (t\u00f6\u00f6taja), SponsorAllAccount, SponsorGroupAccounts, SponsorOwnAccounts (kylaline konto, et hallata k\u00fclaliste portaali), Guest (k\u00fclaline), ActivatedGuest (aktiivne k\u00fclaline).<\/p>\n<p><strong>Kasutaja roll \u2014 <\/strong>kasutaja roll \u2014 see on \u00f5iguste kogum, mis m\u00e4\u00e4ratleb, milliseid \u00fclesandeid kasutaja saab t\u00e4ita ja millistele teenustele ta p\u00e4\u00e4seb. Sageli on kasutaja roll seotud kasutajagrupiga.<\/p>\n<p>Lisaks on igal kasutajal ja kasutajagrupil t\u00e4iendavad atribuudid, mis v\u00f5imaldavad neid eristada ja t\u00e4psemalt m\u00e4\u00e4ratleda. Rohkem teavet leiate <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/security\/ise\/2-0\/admin_guide\/b_ise_admin_guide_20\/m_ise_man_stores.html#ID1089\"><u>juhendis<\/u><\/a><\/noindex>.<\/p>\n<h2>2. Kohalike kasutajate loomine<\/h2>\n<p>1) Cisco ISE-s on v\u00f5imalus luua kohalikke kasutajaid ja kasutada neid turvapoliitikas v\u00f5i isegi anda neile toote halduri roll. Valige <em>Administration \u2192 Identity Management \u2192 Identities \u2192 Users \u2192 Add.<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/5e56ad32ab7c5b1b37733d8887991d5d.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 1. Kohaliku kasutaja lisamine Cisco ISE-sse<\/p>\n<p>2) Ilmuvatel akendel looge kohalik kasutaja, m\u00e4\u00e4rake talle parool ja muud arusaadavad parameetrid.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/612bbc88b7f5a5f029cbd224241c15ad.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 2. Kohalik kasutaja loomine Cisco ISE-s<\/p>\n<p>3) Kasutajaid saab ka importida. Samas vahes <em>Haldus \u2192 Identiteedihaldus \u2192 Identiteed \u2192 Kasutajad <\/em>valige valik <em>Importida <\/em>ja laadige \u00fcles csv v\u00f5i txt fail kasutajatega. Malli saamiseks valige <em>Genereeri mall<\/em>, seej\u00e4rel tuleb see t\u00e4ita kasutajate teabega sobivas vormis.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/1fd2c0dae86103b638dc1d44bc6896a0.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 3. Kasutajate importimine Cisco ISE-s<\/p>\n<h2>3. LDAP serverite lisamine<\/h2>\n<p>Tuletan meelde, et LDAP \u2014 populaarne rakendusprotokoll, mis v\u00f5imaldab saada teavet, teostada autentimist, otsida salvestusi LDAP serverites, t\u00f6\u00f6tab pordil 389 v\u00f5i 636 (SS). Tuntud LDAP serverite n\u00e4ideteks on Active Directory, Sun Directory, Novell eDirectory ja OpenLDAP. Iga salvestus LDAP kataloogis m\u00e4\u00e4ratletakse DN (Distinguished Name) ja juurdep\u00e4\u00e4supoliitika v\u00e4ljat\u00f6\u00f6tamiseks tuleb v\u00e4lja t\u00f5mmata (retrieval) salvestusi, kasutajagruppide ja atribuutide.<\/p>\n<p>Cisco ISE-s on v\u00f5imalik seadistada juurdep\u00e4\u00e4s paljudele LDAP serveritele, rakendades seega redundantsust. Kui peamine LDAP server ei ole kergesti k\u00e4ttesaadav, proovib ISE p\u00f6\u00f6rduda teise ehk sekundaarse LDAP serveri poole ja nii edasi. Lisaks, kui on 2 PAN-i, v\u00f5ib esmasele PAN-ile seadistada \u00fche LDAP-le prioriteedi, teisele PAN-ile aga teise LDAP.<\/p>\n<p>ISE toetab 2 t\u00fc\u00fcpi otsingut LDAP serveritega t\u00f6\u00f6tamisel: Kasutajaotsing ja MAC-aadressi otsing. Kasutajaotsing v\u00f5imaldab otsida kasutajat LDAP andmebaasis ja saada j\u00e4rgmise teabe ilma autentimiseta: kasutajad ja nende atribuudid, kasutajagruppide. MAC-aadressi otsing v\u00f5imaldab samuti ilma autentimiseta otsida MAC-aadresse LDAP kataloogides ja saada teavet seadme, seadmete grupi MAC-aadresside ja muude spetsiifiliste atribuutide kohta.<\/p>\n<p>Integreerimise n\u00e4itena lisame Active Directory Cisco ISE-s LDAP serverina.<\/p>\n<p>1) Minge vahekaardile <em>Haldus \u2192 Identiteedihaldus \u2192 V\u00e4listudengite allikad \u2192 LDAP \u2192 Lisa.<\/em>&nbsp;<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/21151bf88c8a5fc9cafe2ce58418d6b9.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 4. LDAP serveri lisamine<\/p>\n<p>2) Paneelil <em>\u00dcldine <\/em>m\u00e4\u00e4ra LDAP serveri nimi ja skeem (meie juhul Active Directory).&nbsp;<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/93b132553a77d03bedc5b43978692c6d.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 5. LDAP serveri lisamine Active Directory skeemiga<\/p>\n<p>3) Seej\u00e4rel minge vahekaardile <em>\u00dchendus <\/em>ja m\u00e4\u00e4rake <em>Hostnime\/IP aadress <\/em>AD serverid, port (389 \u2014 LDAP, 636 \u2014 SSL LDAP), domeeni administraatori (Admin DN \u2014 t\u00e4ielik DN) autentimisdokumendid, \u00fclej\u00e4\u00e4nud parameetreid v\u00f5ib j\u00e4tta vaikes\u00e4tetena.<\/p>\n<p><em><strong>M\u00e4rkus<\/strong><\/em>: kasutage domeeni administraatori andmeid v\u00f5imalike probleemide v\u00e4ltimiseks.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/dc13756a71e031c8fb1281902318d6f8.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 6. LDAP serveri andmete sisestamine<\/p>\n<p>4) Vahekaardil <em>Katalooge organisatsioon <\/em>peab m\u00e4\u00e4rama katalooge DN kaudu, millest kasutajaid ja kasutajagruppide andmeid t\u00f5mmata.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/5080b6fead47381ddb0f17bd5314fe8e.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 7. Kataloogide m\u00e4\u00e4ramine, kust kasutajagrupid t\u00f5mmatakse<\/p>\n<p>5) Minge aknasse <em>Grupid \u2192 Lisa \u2192 Valige grupid kataloogist <\/em>kasutajagruppide t\u00f5mbamiseks LDAP serverist. <\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/17b27b82c031dd9cfeb228effc197d05.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 8. Gruppide lisamine LDAP serverist<\/p>\n<p>6) Ilmunud aknas vajutage <em>T\u00f5mba grupid. <\/em>Kui grupid t\u00f5mmati, siis on eelnevad sammud edukalt teostatud. Kui ei, proovige teist administraatorit ja veenduge, et ISE oleks saadaval LDAP serveriga LDAP protokolli kaudu.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/66e2a33754432ed898fbd5a50c3c9caf.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 9. T\u00f5mmatud kasutajagruppide loetelu<\/p>\n<p>7) Vahekaardil <em>Atribuudid <\/em>v\u00f5ib valikuliselt m\u00e4\u00e4rata, milliseid atribuute LDAP serverist t\u00f5mmata, ja aknas <em>T\u00e4iendavad seaded <\/em>l\u00fclitage sisse valik <em>Luba parooli muutmine<\/em>, mis sunnib kasutajaid parooli muutma, kui see on aegunud v\u00f5i l\u00e4htestatud. Igatahes vajutage <em>Esita <\/em>edasi minemiseks.<\/p>\n<p>8) LDAP server ilmub vastava vahekaardi alla ja seda saab edaspidi kasutada juurdep\u00e4\u00e4supoliitikate koostamiseks.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/562760819cfcb601535d032d84267d2f.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 10. Lisatud LDAP serverite loetelu<\/p>\n<h2>4. Integreerimine Active Directoryga<\/h2>\n<p>1) Microsoft Active Directory serveri lisamisega LDAP serverina saime kasutajad, kasutajagruppide loetelu, kuid mitte logisid. Edasi soovitan seadistada t\u00e4ieliku AD integreerimise Cisco ISE-ga. Minge vahekaardile <em>Administratsioon \u2192 Identiteedihaldus \u2192 V\u00e4listingimuste identiteediallikad \u2192 Active Directory \u2192 Lisa.&nbsp;<\/em><\/p>\n<p><em><strong>M\u00e4rkus: <\/strong><\/em>EDUks on, et ISE peab olema domeenis ja sellel peab olema t\u00e4ielik \u00fchendus DNS, NTP ja AD serveritega, vastasel juhul ei toimi see.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/f5530a66e45b8da3e84ba0b956ecc8bb.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 11. Active Directory serveri lisamine<\/p>\n<p>2) Ilmunud aknas sisestage domeeni administraatori andmed ja m\u00e4rkige kast <em>Salvesta mandaadid. <\/em>Lisaks v\u00f5ite m\u00e4rgistada OU (Organisatsiooniline \u00fcksus), kui ISE asub konkreetses OU-s. Edasi tuleb valida Cisco ISE s\u00f5lmed, mida soovite domeeniga \u00fchendada.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/ed8ee6219b3b89b7043d2bd0383209f6.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 12. Mandaadi andmete sisestamine<\/p>\n<p>3) Enne domeenikontrollerite lisamist veenduge, et PSN-i vahekaardil <em>Administratsioon \u2192 S\u00fcsteem \u2192 Rakendamine<\/em> oleks valik <em>Passiivne identiteeteenus<\/em>. <strong>PassiveID <\/strong>\u2014 valik, mis v\u00f5imaldab t\u00f5lkida kasutajat IP-ks ja vastupidi. PassiveID saab teavet AD-st WMI, spetsiaalsete AD agentide v\u00f5i SPAN pordi kaudu l\u00fclitil (mitte k\u00f5ige parem variant).<\/p>\n<p><em><strong>M\u00e4rkus: <\/strong><\/em>Passive ID staatuse kontrollimiseks sisestage ISE konsooli <strong>show application status ise | include PassiveID.<\/strong><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/fdef0f1d9989cecb54e0133311886e15.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 13. PassiveID valiku lubamine <\/p>\n<p>4) Minge vahekaardile <em>Administration \u2192 Identity Management \u2192 External Identity Sources \u2192 Active Directory \u2192 PassiveID <\/em>ja valige valik <em>Lisa DC-d<\/em>. Seej\u00e4rel valige linnukestega vajalikud domeenikontrollerid ja vajutage <em>OK.<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/0c8e1c03913a6ea2df40ba097f718133.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 14. Domeenikontrollerite lisamine<\/p>\n<p>5) Valige lisatud DC-d ja vajutage nuppu <em>Muuda. <\/em>M\u00e4\u00e4rake <em>FQDN <\/em>teie DC, domeeni sisselogimisandmed ja parool, samuti \u00fchenduse valik <em>WMI <\/em>v\u00f5i <em>Agent<\/em>. Valige WMI ja vajutage <em>OK.<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/c484fbbc8c57a11eae3879088acd5186.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 15. Domeenikontrolleri andmete sisestamine<\/p>\n<p>6) Kui WMI ei ole eelistatud viis Active Directory-ga suhtlemiseks, siis v\u00f5ib kasutada ISE-agente. Agendi meetod seisneb selles, et saate serveritesse installida spetsiaalsedagendid, mis edastavad sisselogimise s\u00fcndmusi. On olemas 2 installatsiooniv\u00f5imalust: automaatne ja k\u00e4sitsi. Agendi automaatseks installimiseks valige samal vahekaardil <em>PassiveID <\/em>valik<em> Add Agent \u2192 Deploy New Agent<\/em> (DC-l peab olema juurdep\u00e4\u00e4s internetile). Seej\u00e4rel t\u00e4itke kohustuslikud v\u00e4ljad (agendi nimi, serveri FQDN, domeeni administraatori sisselogimisandmed\/parool) ja vajutage <em>OK.<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/9972907c37737e2b20c5e601724f054b.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 16. ISE agendi automaatne installatsioon<\/p>\n<p>7) Cisco ISE agendi k\u00e4sitsi installimiseks tuleb valida valik <em>Registreeri olemasolev agent<\/em>. Muide, agendi allalaadimiseks minge vahekaardile <em>Work Centers \u2192 PassiveID \u2192 Providers \u2192 Agents \u2192 Download Agent.<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/5ecdabc1fa3b7236b0f88f47bf828576.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 17. ISE agendi allalaadimine<\/p>\n<p><em><strong>Oluline: <\/strong><\/em>PassiveID ei loe s\u00fcndmusi <strong>logoff<\/strong>! Aset\u00e4itmise parameeter on tuntud kui <strong>kasutajasessiooni vananemise aeg<\/strong> ja on vaikimisi 24 tundi. Seet\u00f5ttu tuleb kas ise logida v\u00e4lja p\u00e4rast t\u00f6\u00f6p\u00e4eva l\u00f5ppu v\u00f5i kirjutada m\u00f5ni skript, mis logib automaatselt v\u00e4lja k\u00f5ik sisse logitud kasutajad.&nbsp;<\/p>\n<p>Informatsiooni saamiseks <strong>logoff<\/strong> kasutatakse \u201eL\u00f5pp-punkti sondid\u201c \u2014 l\u00f5pp-punkti sondid. Cisco ISE-s on mitmeid l\u00f5pp-punkti sonde: RADIUS, SNMP Trap, SNMP K\u00fcsitlus, DHCP, DNS, HTTP, Netflow, NMAP Skaneerimine. <strong>RADIUS <\/strong>probe kaudu <strong>CoA <\/strong>(Change of Authorization) paketid edastavad teavet kasutaja \u00f5iguste muutmise kohta (selleks on vajalik juurutatud <strong>802.1X<\/strong>), ning sisse l\u00fclitatud SNMP-l\u00fclitites pakub teavet \u00fchendatud ja \u00fchendusest eemaldatud seadmete kohta.<\/p>\n<p>Allpool on n\u00e4ide, mis kehtib Cisco ISE + AD konfiguratsiooni kohta ilma 802.1X ja RADIUSeta: kasutaja on Windowsi masinas sisse logitud, j\u00e4ttes logimise vahele, ja logib sisse teise arvutisse WiFi kaudu. Sellisel juhul j\u00e4\u00e4b esimeses arvutis seanss aktiivseks, kuni toimub ajav\u00e4li v\u00f5i sunnitud logimine v\u00e4lja. Seega, kui seadmetel on erinevad \u00f5igused, rakendab viimane sisse logitud seade oma \u00f5igusi.<\/p>\n<p>8) T\u00e4iendavalt vahekaardil <em>Haldus \u2192 Identiteedihaldus \u2192 V\u00e4limised identiteediallikad \u2192 Active Directory \u2192 Grupid \u2192 Lisa \u2192 Valige gruppid kataloogist <\/em>v\u00f5ite valida AD grupid, mida soovite ISE-sse importida (meie puhul tehti see sammus 3 \u201eLDAP-serveri lisamine\u201d). Valige valik <em>T\u00f5sta grupid \u2192 OK<\/em>.&nbsp;<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/044864b12c94528eded7a24b47452c6d.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 18 a). Grupid kasutajatest Active Directoryst<\/p>\n<p>9) Vahekaardil <em>T\u00f6\u00f6keskused \u2192 PassiveID \u2192 \u00dclevaade \u2192 Armatuurlaud<\/em> saate j\u00e4lgida aktiivsete seansside arvu, andmeallikaid, agente ja muud.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/387389282ba2fe54be4af0e4da37371b.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 19. Domeeni kasutajate tegevuse j\u00e4lgimine<\/p>\n<p>10) Vahekaart <em>Aktiivsed seansid<\/em> kuvatakse aktiivsed seansid. Integreerimine AD-iga on seadistatud.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP serverite lisamine, AD integreerimine. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/85333b48e751c5d9dc9e44364a103dcc.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 20. Domeeni kasutajate aktiivsed seansid<\/p>\n<h2>5. Kokkuv\u00f5te<\/h2>\n<p>Selles artiklis k\u00e4sitleti kohalike kasutajate loomist Cisco ISE-s, LDAP-serverite lisamist ja integreerimist Microsoft Active Directoryga. J\u00e4rgmises artiklis arutatakse k\u00fclaliseks p\u00e4\u00e4su nagu mahukas juhend.<\/p>\n<p>Kui teil on selle teema kohta k\u00fcsimusi v\u00f5i vajate toote testimisel abi, v\u00f5tke \u00fchendust <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/katalog\/cisco\/ise\"><u>lingil<\/u><\/a><\/noindex>.<\/p>\n<p>J\u00e4lgige meie kanaleid (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\"><u>Telegram<\/u><\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\"><u>Facebook<\/u><\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\"><u>VK<\/u><\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\"><u>TS Solution Blog<\/u><\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/zen.yandex.ru\/id\/5c7d2162fa818600ae386a52\"><u>Yandex.Zen<\/u><\/a><\/noindex>).<\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/520222\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u043e\u043c\u0443 Cisco ISE. \u0412 \u043f\u0435\u0440\u0432\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435&nbsp; \u0431\u044b\u043b\u0438 \u043e\u0441\u0432\u0435\u0449\u0435\u043d\u044b \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0430 \u0438 \u043e\u0442\u043b\u0438\u0447\u0438\u044f Network Access Control (NAC) \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043e\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0410\u0410\u0410, \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c Cisco ISE, \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430 \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0443\u0433\u043b\u0443\u0431\u0438\u043c\u0441\u044f \u0432 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044e LDAP \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044e \u0441 Microsoft Active Directory, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043d\u044e\u0430\u043d\u0441\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95331,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95330","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Cisco ISE: \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 LDAP \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0441 AD. \u0427\u0430\u0441\u0442\u044c 2 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-28T05:42:51+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-28T05:42:51+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Cisco ISE: \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 LDAP \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0441 AD. \u0427\u0430\u0441\u0442\u044c 2 | ProHoster","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-28T05:42:51+00:00","article:modified_time":"2020-09-28T05:42:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95330","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:07:33","updated":"2022-09-28 09:57:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/95330","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=95330"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/95330\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/95331"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=95330"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=95330"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=95330"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}