{"id":95330,"date":"2020-09-28T07:42:51","date_gmt":"2020-09-28T05:42:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2"},"modified":"2020-09-28T07:42:51","modified_gmt":"2020-09-28T05:42:51","slug":"cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","title":{"rendered":"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/b1c271d9da09b338a0b9d8f1e5217d24.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Tere tulemast teise artikli avaldamisse, mis on p\u00fchendatud Cisco ISE-le. Esimeses <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/519616\/\"><u>artiklis<\/u><\/a><\/noindex>&nbsp; k\u00e4sitleti v\u00f5rgu juurdep\u00e4\u00e4su kontrolli (NAC) lahenduste eelist ja erinevusi standardsetest AAA lahendustest, Cisco ISE unikaalsust, arhitektuuri ja toote installimise protsessi.<\/p>\n<p>K\u00e4esolevas artiklis keskendume kasutajakontode loomisele, LDAP-serverite lisamisele ja integreerimisele Microsoft Active Directoryga, samuti detailidele, mis on seotud PassiveID kasutamisega. Enne lugemist soovitan tungivalt tutvuda <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/519616\/\"><u>esimese osaga<\/u><\/a><\/noindex>.<\/p>\n<h2>1. M\u00f5ned terminoloogiad<\/h2>\n<p><strong>Kasutaja identiteet<\/strong> \u2014 kasutajate konto, mis sisaldab teavet kasutaja kohta ja m\u00e4\u00e4rab tema autentimisteabe v\u00f5rku p\u00e4\u00e4semiseks. User Identity's on tavaliselt j\u00e4rgmised parameetrid: kasutajanimi, e-posti aadress, parool, konto kirjeldus, kasutajate grupp ja roll.<\/p>\n<p><strong>Kasutajagrupp <\/strong>\u2014 kasutajate grupid \u2014 need on \u00fcksikute kasutajate kogum, kellel on \u00fchesugused \u00f5igused, mis v\u00f5imaldavad neil p\u00e4\u00e4seda teatud teenuste ja funktsioonide kogumile Cisco ISE-s.<\/p>\n<p><strong>Kasutaja identiteedi grupid \u2014 <\/strong>eelnevalt m\u00e4\u00e4ratletud kasutajagruppide r\u00fchm, kes omab juba teatud teavet ja rolle. J\u00e4rgnevad kasutajaidentiteedi grupid eksisteerivad vaikimisi, neisse saab lisada kasutajaid ja kasutajagruppe: Employee (t\u00f6\u00f6taja), SponsorAllAccount, SponsorGroupAccounts, SponsorOwnAccounts (sponsori kontod k\u00fclalisportaali haldamiseks), Guest (k\u00fclaline), ActivatedGuest (aktiveeritud k\u00fclaline).<\/p>\n<p><strong>Kasutaja roll \u2014 <\/strong>kasutaja roll \u2014 see on lubade kogum, mis m\u00e4\u00e4ratleb, milliseid \u00fclesandeid kasutaja saab t\u00e4ita ja millistele teenustele tal on juurdep\u00e4\u00e4s. Tihti on kasutaja roll seotud kasutajate grupiga.<\/p>\n<p>Lisaks on igal kasutajal ja kasutajagruppidel t\u00e4iendavad atribuudi, mis v\u00f5imaldavad neid eristada ja t\u00e4psemalt m\u00e4\u00e4ratleda. T\u00e4iendavat teavet leiate <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/security\/ise\/2-0\/admin_guide\/b_ise_admin_guide_20\/m_ise_man_stores.html#ID1089\"><u>juhendis<\/u><\/a><\/noindex>.<\/p>\n<h2>2. Kohalikud kasutajad<\/h2>\n<p>1) Cisco ISE-s on v\u00f5imalik luua kohalikke kasutajaid ja kasutada neid juurdep\u00e4\u00e4supoliitikates v\u00f5i isegi anda neile toote haldamise roll. Valige <em>Administration \u2192 Identity Management \u2192 Identities \u2192 Users \u2192 Add.<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/5e56ad32ab7c5b1b37733d8887991d5d.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 1. Kohaliku kasutaja lisamine Cisco ISE-s<\/p>\n<p>2) Avanenud aknas looge kohaliku kasutaja, m\u00e4\u00e4rake talle parool ja muud arusaadavad parameetrid.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/612bbc88b7f5a5f029cbd224241c15ad.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 2. Kohaliku kasutaja loomine Cisco ISE-s<\/p>\n<p>3) Kasutajaid on v\u00f5imalik ka importida. Samas vahekaardis <em>Administration \u2192 Identity Management \u2192 Identities \u2192 Users <\/em>valige valik <em>Import <\/em>ja laadige \u00fcles csv v\u00f5i txt fail kasutajatega. Malli saamiseks valige <em>Generate a Template<\/em>, seej\u00e4rel t\u00e4itke see kasutajate teabega sobivas vormingus.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/1fd2c0dae86103b638dc1d44bc6896a0.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 3. Kasutajate importimine Cisco ISE-s<\/p>\n<h2>3. LDAP serverite lisamine<\/h2>\n<p>LDAP on populaarne rakendustasandi protokoll, mis v\u00f5imaldab teavet hankida, autentimist sooritada ja LDAP serverite kataloogidesse kontoandmeid otsida. See t\u00f6\u00f6tab portidel 389 v\u00f5i 636 (SSL). Tuntud LDAP serverite hulka kuuluvad Active Directory, Sun Directory, Novell eDirectory ja OpenLDAP. Iga LDAP katalooge sissekanne m\u00e4\u00e4ratakse DN (Distinguished Name) kaudu ja juurdep\u00e4\u00e4supoliitika s\u00e4tete loomisel on vajalik kontoandmete, kasutajagruppide ja atribuutide hankimine (retrieval).<\/p>\n<p>Cisco ISE-s on v\u00f5imalik seadistada juurdep\u00e4\u00e4s paljudele LDAP serveritele, v\u00f5imaldades seel\u00e4bi \u00fcleliigsust. Kui peamine LDAP server ei ole saadaval, proovib ISE p\u00f6\u00f6rduda teisese (secondary) LDAP serveri poole jne. Lisaks, kui on olemas 2 PAN-i, siis v\u00f5ib peamise PAN-i jaoks m\u00e4\u00e4rata \u00fche LDAP serveri prioriteediks ja teise LDAP serveri teisene PAN-i jaoks.<\/p>\n<p>ISE toetab 2 t\u00fc\u00fcpi otsingut (lookup) LDAP-serverite kasutamisel: User Lookup ja MAC Address Lookup. User Lookup v\u00f5imaldab otsida kasutajat LDAP-andmebaasist ja saada j\u00e4rgmised andmed ilma autentimata: kasutajad ja nende atribuudid, kasutajagruppide kohta. MAC Address Lookup v\u00f5imaldab samuti ilma autentimata otsida MAC-aadresside j\u00e4rgi LDAP-kataloogides ning saada teavet seadme, seadmete grupi MAC-aadresside ja teiste spetsiifiliste atribuutide kohta.<\/p>\n<p>Integreerimise n\u00e4iteks lisame Active Directory Cisco ISE-s LDAP-serverina.<\/p>\n<p>1) Minge vahekaardile <em>Administration \u2192 Identity Management \u2192 External Identity Sources \u2192 LDAP \u2192 Add.<\/em>&nbsp;<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/21151bf88c8a5fc9cafe2ce58418d6b9.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 4. LDAP-serveri lisamine<\/p>\n<p>2) Paneelis <em>General <\/em>m\u00e4rkige LDAP-serveri nimi ja skeem (meie juhul Active Directory).&nbsp;<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/93b132553a77d03bedc5b43978692c6d.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 5. LDAP-serveri lisamine Active Directory skeemiga<\/p>\n<p>3) Seej\u00e4rel minge <em>\u00dchendus <\/em>\u00fcksuse ja sisestage <em>Hostname\/IP aadress <\/em>AD serverid, port (389 - LDAP, 636 - SSL LDAP), domeeni administraatori mandaalid (Admin DN - t\u00e4ielik DN), \u00fclej\u00e4\u00e4nud seaded v\u00f5ib j\u00e4tta vaikeseadeteks.<\/p>\n<p><em><strong>M\u00e4rkus<\/strong><\/em>: kasutage domeeni admini andmeid, et v\u00e4ltida v\u00f5imalikke probleeme.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/dc13756a71e031c8fb1281902318d6f8.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 6. LDAP serveri andmete sisestamine<\/p>\n<p>4) Vahekaardil <em>Kataloogiorganisatsioon <\/em>tuleb m\u00e4rkida katalooge DN kaudu, kust kasutajad ja kasutajagrupid v\u00e4lja t\u00f5mmatakse.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/5080b6fead47381ddb0f17bd5314fe8e.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 7. Kataloogide m\u00e4\u00e4ramine, kust grupid v\u00e4lja t\u00f5mmatakse<\/p>\n<p>5) Liikuge aknasse <em>Groups \u2192 Add \u2192 Select Groups From Directory <\/em>et valida grupiv\u00e4ljat\u00f5mbamine LDAP serverist. <\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/17b27b82c031dd9cfeb228effc197d05.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 8. Gruppide lisamine LDAP serverist<\/p>\n<p>6) Avanevas aknas kl\u00f5psake <em>Retrieve Groups. <\/em>Kui grupid t\u00f5mmati, t\u00e4hendab, et eelnevad sammud on edukalt sooritatud. Kui ei, proovige teist administraatorit ja kontrollige ISE juurdep\u00e4\u00e4setavust LDAP serveriga LDAP protokolli kaudu.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/66e2a33754432ed898fbd5a50c3c9caf.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 9. T\u00f5mmatud kasutajagruppide loetelu<\/p>\n<p>7) Vahekaardil <em>Attributes <\/em>v\u00f5ite valikuliselt m\u00e4rkida, milliseid atribuute LDAP serverist tuleks v\u00e4lja t\u00f5mmata, ja aknas <em>Advanced Settings <\/em>l\u00fclitage sisse valik <em>Enable Password Change<\/em>, mis paneb kasutajad parooli muutma, kui see on aegunud v\u00f5i l\u00e4htestatud. Igal juhul kl\u00f5psake <em>Esita <\/em>edasi minemiseks.<\/p>\n<p>8) LDAP-server on ilmunud vastavasse vahekaardile ja seda saab seej\u00e4rel kasutada juurdep\u00e4\u00e4sukavade koostamiseks.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/562760819cfcb601535d032d84267d2f.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 10. Lisatud LDAP-serverite nimekiri<\/p>\n<h2>4. Integreerimine Active Directoryga<\/h2>\n<p>1) Microsoft Active Directory serveri lisamisega LDAP-serverina saime kasutajad, kasutajar\u00fchmad, kuid mitte logisid. Edasi soovitan seadistada t\u00e4ielik AD integreerimine Cisco ISE-ga. Liikuge vahekaardile <em>Administratsioon \u2192 Isiku haldus \u2192 V\u00e4listesse identiteedi allikatesse \u2192 Active Directory \u2192 Lisa.&nbsp;<\/em><\/p>\n<p><em><strong>M\u00e4rkus: <\/strong><\/em>AD-ga edukaks integreerimiseks peab ISE asuma domeenis ja omama t\u00e4ielikku \u00fchenduvust DNS, NTP ja AD serveritega, vastasel juhul ei \u00f5nnestu.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/f5530a66e45b8da3e84ba0b956ecc8bb.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 11. Active Directory serveri lisamine<\/p>\n<p>2) Avanevas aknas sisestage domeeni administraatori andmed ja m\u00e4rkige ruudu <em>Krediidide salvestamine. <\/em>Lisaks saate m\u00e4rkida OU (organisatsiooniline \u00fcksus), kui ISE asub m\u00f5nes konkreetses OU-s. Edasi tuleb valida Cisco ISE s\u00f5lmed, mille soovite domeeniga \u00fchendada.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/ed8ee6219b3b89b7043d2bd0383209f6.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 12. Kontode andmete sisestamine<\/p>\n<p>3) Enne domeeni kontrollerite lisamist veenduge, et PSN oleks vahekaardil <em>Halduse \u2192 S\u00fcsteem \u2192 Rakendamine<\/em> on valik aktiivne <em>Passiivne Identiteediteenus<\/em>. <strong>PassiveID <\/strong>\u2014 valik, mis v\u00f5imaldab edastada Useri IP-le ja vastupidi. PassiveID saab teavet AD-st l\u00e4bi WMI, spetsiaalsete AD agentide v\u00f5i SPAN sadama kaudu l\u00fclitil (mis ei ole parim variant).<\/p>\n<p><em><strong>M\u00e4rkus: <\/strong><\/em>Passiivse ID oleku kontrollimiseks sisestage ISE konsooli <strong>show application status ise | include PassiveID.<\/strong><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/fdef0f1d9989cecb54e0133311886e15.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 13. PassiveID valiku lubamine <\/p>\n<p>4) Liikuge vahelehele <em>Halduse \u2192 Identiteedihaldus \u2192 V\u00e4list Identiteedi Allikad \u2192 Active Directory \u2192 PassiveID <\/em>ja valige valik <em>Lisa DC-d<\/em>. Seej\u00e4rel valige vajalikud domeeni kontrollijad ja vajutage <em>OK.<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/0c8e1c03913a6ea2df40ba097f718133.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 14. Domeeni kontrollijate lisamine<\/p>\n<p>5) Valige lisatud DC ja vajutage nuppu <em>Muutmine. <\/em>M\u00e4\u00e4rake <em>FQDN <\/em>teie DC, domeeni sisselogimise ja parooli, samuti \u00fchenduse valik <em>WMI <\/em>v\u00f5i <em>Agent<\/em>. Valige WMI ja vajutage <em>OK.<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/c484fbbc8c57a11eae3879088acd5186.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 15. Domeeni kontrollija andmete sisestamine<\/p>\n<p>6) Kui WMI ei ole soovitatav meetod \u00fchendamiseks Active Directory-ga, v\u00f5ite kasutada ISE-agente. Agentide meetod seisneb selles, et saate serveritesse installida spetsiaalsed agendid, mis edastavad sisenemise s\u00fcndmusi. On kaks paigaldusv\u00f5imalust: automaatne ja k\u00e4sitsi. Automaatse agendi paigaldamiseks valige samal vahelehel <em>PassiveID <\/em>punkt<em> Lisa agent \u2192 K\u00e4ivita uus agent<\/em> (DC peab olema Interneti-\u00fchendus). T\u00e4itke seej\u00e4rel kohustuslikud v\u00e4ljad (agendi nimi, serveri FQDN, domeeni administraatori sisselogimise\/varundamise parool) ja kl\u00f5psake <em>OK.<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/9972907c37737e2b20c5e601724f054b.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 16. ISE agendi automaatne installimine<\/p>\n<p>7) Cisco ISE agendi k\u00e4sitsi installimiseks tuleb valida element <em>Registreeri olemasolev agent<\/em>. Lisaks, agenti saab alla laadida vahekaardilt <em>T\u00f6\u00f6keskused \u2192 PassiveID \u2192 Pakkujad \u2192 Agendid \u2192 Laadi agent alla.<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/5ecdabc1fa3b7236b0f88f47bf828576.jpg\" style=\"display:block;margin: 0 auto;\" \/>Joonis 17. ISE agendi allalaadimine<\/p>\n<p><em><strong>Oluline: <\/strong><\/em>PassiveID ei loe s\u00fcndmusi <strong>logoff<\/strong>! Asetusega seotud parameeter, mis vastutab aja\u00fclevaate eest, on <strong>kasutaja sessiooni aegumise aeg<\/strong> ja on vaikimisi 24 tundi. Seet\u00f5ttu tuleb kas ise v\u00f5tta logoff t\u00f6\u00f6p\u00e4eva l\u00f5pus v\u00f5i kirjutada m\u00f5ni skript, mis teeb automaatse logoff k\u00f5igile sisse logitud kasutajatele.&nbsp;<\/p>\n<p>Teabe saamiseks <strong>logoff<\/strong> kasutatakse \u201eEndpoint probes\u201c \u2014 l\u00f5pppunkti sonde. Cisco ISE-s eksisteerib mitu Endpoint probe'i: RADIUS, SNMP Trap, SNMP Query, DHCP, DNS, HTTP, Netflow, NMAP Scan. <strong>RADIUS <\/strong>probe, mis t\u00f6\u00f6tab <strong>CoA <\/strong>(Authorization Change) paketid edastavad teavet kasutaja \u00f5iguste muutmise kohta (selleks on vajalik rakendatud <strong>802.1X<\/strong>), samas kui seadistatud juurdep\u00e4\u00e4su l\u00fclitites SNMP annab teavet \u00fchendatud ja lahutatud seadmete kohta.<\/p>\n<p>Allpool on Cisco ISE + AD konfigureerimise n\u00e4ide ilma 802.1X ja RADIUSeta: kasutaja on sisselogitud Windowsi masinas, logimata v\u00e4lja, ja logib sisse teiselt PC-lt WiFi kaudu. Sel juhul j\u00e4\u00e4b esimene PC seanss endiselt aktiivseks, kuni toimub aja \u00fcletamine v\u00f5i sunnitud v\u00e4ljalogimine. Kui seadmetel on erinevad \u00f5igused, siis rakendatakse viimase sisselogitud seadme \u00f5igusi.<\/p>\n<p>8) T\u00e4iendavalt vahekaardil <em>Haldus \u2192 Identiteedihaldus \u2192 V\u00e4lised identiteediallikad \u2192 Active Directory \u2192 Grupid \u2192 Lisa \u2192 Valige r\u00fchm muudest kataloogidest <\/em>saate valida AD grupid, mida soovite tuua ISE-sse (meie puhul tehti see sammus 3 \u201eLDAP serveri lisamine\u201d). Valige valik <em>T\u00f5sta grupid \u2192 OK<\/em>.&nbsp;<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/044864b12c94528eded7a24b47452c6d.jpg\" style=\"display:block;margin: 0 auto;\" \/>Kujutis 18: Kasutajate gruppide t\u00f5mbamine Active Directoryst<\/p>\n<p>9) Vahekaardil <em>T\u00f6\u00f6 keskused \u2192 PassiveID \u2192 \u00dclevaade \u2192 Armatuurlaud<\/em> saate j\u00e4lgida aktiivsete seansside arvu, andmeallikate arvu, agente jne.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/387389282ba2fe54be4af0e4da37371b.jpg\" style=\"display:block;margin: 0 auto;\" \/>Kujutis 19. Domeeni kasutajate aktiivsuse j\u00e4lgimine<\/p>\n<p>10) Vahekaardil <em>Elavad seansid<\/em> kuvatakse praegused sessioonid. Integreerimine AD-ga on seadistatud.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2\" src=\"\/wp-content\/uploads\/2020\/09\/85333b48e751c5d9dc9e44364a103dcc.jpg\" style=\"display:block;margin: 0 auto;\" \/>Kujutis 20. Domeeni kasutajate aktiivsed seansid<\/p>\n<h2>5. Kokkuv\u00f5te<\/h2>\n<p>Selles artiklis k\u00e4sitleti kohalike kasutajate loomist Cisco ISE-s, LDAP-serverite lisamist ja integreerimist Microsoft Active Directoryga. J\u00e4rgmisel artiklil on plaanis k\u00e4sitleda k\u00fclalise juurdep\u00e4\u00e4su, mis on \u00fclevaatlik juhend.<\/p>\n<p>Kui teil on selle teema kohta k\u00fcsimusi v\u00f5i vajate toodete testimisel abi, v\u00f5tke \u00fchendust <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/katalog\/cisco\/ise\"><u>lingi kaudu<\/u><\/a><\/noindex>.<\/p>\n<p>J\u00e4lgige meie uuendusi kanalites (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\"><u>Telegram<\/u><\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\"><u>Facebook<\/u><\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\"><u>VK<\/u><\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\"><u>TS Solution Blog<\/u><\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/zen.yandex.ru\/id\/5c7d2162fa818600ae386a52\"><u>Yandex.Dzen<\/u><\/a><\/noindex>).<\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/520222\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u043e\u043c\u0443 Cisco ISE. \u0412 \u043f\u0435\u0440\u0432\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435&nbsp; \u0431\u044b\u043b\u0438 \u043e\u0441\u0432\u0435\u0449\u0435\u043d\u044b \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0430 \u0438 \u043e\u0442\u043b\u0438\u0447\u0438\u044f Network Access Control (NAC) \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043e\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0410\u0410\u0410, \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c Cisco ISE, \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430 \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0443\u0433\u043b\u0443\u0431\u0438\u043c\u0441\u044f \u0432 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044e LDAP \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044e \u0441 Microsoft Active Directory, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043d\u044e\u0430\u043d\u0441\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95331,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95330","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Cisco ISE: \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 LDAP \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0441 AD. \u0427\u0430\u0441\u0442\u044c 2 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-28T05:42:51+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-28T05:42:51+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cisco ISE: Kasutajate loomine, LDAP-serverite lisamine, integreerimine AD-ga. Osa 2 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Cisco ISE: \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 LDAP \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0441 AD. \u0427\u0430\u0441\u0442\u044c 2 | ProHoster","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-28T05:42:51+00:00","article:modified_time":"2020-09-28T05:42:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95330","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:07:33","updated":"2022-09-28 09:57:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/95330","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=95330"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/95330\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/95331"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=95330"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=95330"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=95330"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}