{"id":95330,"date":"2020-09-28T07:42:51","date_gmt":"2020-09-28T05:42:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2"},"modified":"2020-09-28T07:42:51","modified_gmt":"2020-09-28T05:42:51","slug":"cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","title":{"rendered":"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/b1c271d9da09b338a0b9d8f1e5217d24.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Bun venit la a doua publica\u021bie din seria de articole dedicate Cisco ISE. \u00cen prima <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/519616\/\"><u>pe care l-a\u021bi citit<\/u><\/a><\/noindex>&nbsp; au fost discutate avantajele \u0219i diferen\u021bele solu\u021biilor de Control al Accesului la Re\u021bea (NAC) fa\u021b\u0103 de standardele AAA, unicitatea Cisco ISE, arhitectura \u0219i procesul de instalare al produsului.<\/p>\n<p>\u00cen acest articol, ne vom aprofunda \u00een crearea conturilor de utilizator, ad\u0103ugarea serverelor LDAP \u0219i integrarea cu Microsoft Active Directory, precum \u0219i \u00een nuan\u021bele utiliz\u0103rii PassiveID. \u00cenainte de a citi, v\u0103 recomand cu insisten\u021b\u0103 s\u0103 consulta\u021bi <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/519616\/\"><u>prima parte<\/u><\/a><\/noindex>.<\/p>\n<h2>1. Pu\u021bin\u0103 terminologie<\/h2>\n<p><strong>Identitatea utilizatorului<\/strong> \u2014 contul utilizatorului, care con\u021bine informa\u021bii despre utilizator \u0219i formeaz\u0103 datele sale de acces la re\u021bea. Urm\u0103toarele parametre sunt, de obicei, specificate \u00een User Identity: numele de utilizator, adresa de e-mail, parola, descrierea contului, grupul utilizatorilor \u0219i rolul.<\/p>\n<p><strong>Grupurile de utilizatori <\/strong>\u2014 grupuri de utilizatori \u2014 o combina\u021bie de utilizatori care au un set comun de privilegii, care le permite s\u0103 acceseze un anumit set de servicii \u0219i func\u021bii Cisco ISE.<\/p>\n<p><strong>User Identity Groups \u2014 <\/strong>grupuri predefinite de utilizatori, care au deja informa\u021bii \u0219i roluri definite. Urm\u0103toarele Grupuri de identitate ale utilizatorului exist\u0103 \u00een mod implicit, \u00een care pot fi ad\u0103uga\u021bi utilizatori \u0219i grupuri de utilizatori: Employee (angajat), SponsorAllAccount, SponsorGroupAccounts, SponsorOwnAccounts (conturi de sponsor pentru gestionarea portalului de oaspe\u021bi), Guest (oaspe\u021bi), ActivatedGuest (oaspe\u021bi activat).<\/p>\n<p><strong>User Role \u2014 <\/strong>rolul utilizatorului \u2014 un set de permisiuni, care define\u0219te ce sarcini poate \u00eendeplini utilizatorul \u0219i la ce servicii poate avea acces. De obicei, rolul utilizatorului este asociat cu un grup de utilizatori.<\/p>\n<p>Mai mult dec\u00e2t at\u00e2t, fiecare utilizator \u0219i grup de utilizatori are atribute suplimentare care permit identificarea \u0219i definirea mai specific\u0103 a acestui utilizator (grup de utilizatori). Mai multe informa\u021bii \u00een <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/security\/ise\/2-0\/admin_guide\/b_ise_admin_guide_20\/m_ise_man_stores.html#ID1089\"><u>ghid<\/u><\/a><\/noindex>.<\/p>\n<h2>2. Crearea utilizatorilor locali<\/h2>\n<p>1) \u00cen Cisco ISE exist\u0103 posibilitatea de a crea utilizatori locali \u0219i de a-i utiliza \u00een politica de acces sau chiar de a le oferi rol de administrare. Selecta\u021bi <em>Administration \u2192 Identity Management \u2192 Identities \u2192 Users \u2192 Add.<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/5e56ad32ab7c5b1b37733d8887991d5d.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figura 1. Ad\u0103ugarea unui utilizator local \u00een Cisco ISE<\/p>\n<p>2) \u00cen fereastra care apare, crea\u021bi un utilizator local, seta\u021bi-i o parol\u0103 \u0219i alte parametri clare.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/612bbc88b7f5a5f029cbd224241c15ad.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figura 2. Crearea unui utilizator local \u00een Cisco ISE<\/p>\n<p>3) De asemenea, utilizatorii pot fi importa\u021bi. \u00cen aceast\u0103 tab. <em>Administrare \u2192 Managementul Identit\u0103\u021bii \u2192 Identit\u0103\u021bi \u2192 Utilizatori <\/em>selecta\u021bi op\u021biunea <em>Importa\u021bi <\/em>\u0219i \u00eenc\u0103rca\u021bi un fi\u0219ier csv sau txt cu utilizatori. Pentru a ob\u021bine un \u0219ablon, selecta\u021bi <em>Genera\u021bi un \u0219ablon<\/em>, apoi completa\u021bi-l cu informa\u021bii despre utilizatori \u00eentr-un format adecvat.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/1fd2c0dae86103b638dc1d44bc6896a0.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figura 3. Importul utilizatorilor \u00een Cisco ISE<\/p>\n<h2>3. Ad\u0103ugarea serverelor LDAP<\/h2>\n<p>Reamintesc c\u0103 LDAP \u2014 un protocol popular de nivel aplica\u021bie, care permite ob\u021binerea de informa\u021bii, efectuarea autentific\u0103rii, c\u0103utarea conturilor \u00een directoarele serverelor LDAP, func\u021bioneaz\u0103 pe portul 389 sau 636 (SS). Exemple relevante de servere LDAP sunt Active Directory, Sun Directory, Novell eDirectory \u0219i OpenLDAP. Fiecare \u00eenregistrare din directorul LDAP este definit\u0103 de DN (Distinguished Name) \u0219i pentru a forma politica de acces, este necesar\u0103 recuperarea (retrieval) conturilor, grupurilor de utilizatori \u0219i atributelor.<\/p>\n<p>\u00cen Cisco ISE se poate configura accesul la mai multe servere LDAP, realiz\u00e2nd astfel redundan\u021ba. \u00cen cazul \u00een care serverul LDAP primar nu este disponibil, ISE va \u00eencerca s\u0103 acceseze serverul LDAP secundar \u0219i a\u0219a mai departe. \u00cen plus, dac\u0103 exist\u0103 2 PAN, serverul LDAP poate fi prioritarizat pentru PAN-ul primar, iar pentru PAN-ul secundar \u2014 alt LDAP.<\/p>\n<p>ISE suport\u0103 2 tipuri de c\u0103utare (lookup) atunci c\u00e2nd lucreaz\u0103 cu serverele LDAP: C\u0103utare Utilizator \u0219i C\u0103utare MAC Address. C\u0103utarea Utilizatorului permite c\u0103utarea unui utilizator \u00een baza de date LDAP \u0219i ob\u021binerea urm\u0103toarelor informa\u021bii f\u0103r\u0103 autentificare: utilizatori \u0219i atributele lor, grupuri de utilizatori. C\u0103utarea dup\u0103 MAC Address permite, de asemenea, f\u0103r\u0103 autentificare, s\u0103 efectueze c\u0103ut\u0103ri dup\u0103 adresa MAC \u00een directoarele LDAP \u0219i s\u0103 ob\u021bin\u0103 informa\u021bii despre dispozitiv, grupuri de dispozitive pe baza adreselor MAC \u0219i alte atribute specifice.<\/p>\n<p>Ca exemplu de integrare, vom ad\u0103uga Active Directory \u00een Cisco ISE ca server LDAP.<\/p>\n<p>1) Accesa\u021bi tab-ul <em>Administrare \u2192 Managementul Identit\u0103\u021bii \u2192 Surse Externe de Identitate \u2192 LDAP \u2192 Ad\u0103uga\u021bi.<\/em>&nbsp;<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/21151bf88c8a5fc9cafe2ce58418d6b9.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figura 4. Ad\u0103ugarea serverului LDAP<\/p>\n<p>2) \u00cen panoul <em>General <\/em>indicati numele serverului LDAP \u0219i schema (\u00een cazul nostru Active Directory).&nbsp;<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/93b132553a77d03bedc5b43978692c6d.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figura 5. Ad\u0103ugarea serverului LDAP cu schema Active Directory<\/p>\n<p>3) Apoi, naviga\u021bi la <em>Connection <\/em>tabul \u0219i indica\u021bi <em>Hostname\/IP address <\/em>Servere AD, port (389 \u2014 LDAP, 636 \u2014 SSL LDAP), datele de autentificare ale administratorului de domeniu (Admin DN \u2014 DN complet), celelalte parametri pot fi l\u0103sa\u021bi ca implicit.<\/p>\n<p><em><strong>Not\u0103<\/strong><\/em>: use the domain admin credentials to avoid potential issues.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/dc13756a71e031c8fb1281902318d6f8.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figure 6. Input of LDAP server data<\/p>\n<p>4) In the tab <em>Directory Organization <\/em>you should specify the directory scope through DN from where to pull users and user groups.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/5080b6fead47381ddb0f17bd5314fe8e.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figure 7. Definition of directories from where to pull user groups<\/p>\n<p>5) Go to the window <em>Groups \u2192 Add \u2192 Select Groups From Directory <\/em>to select groups to pull from the LDAP server. <\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/17b27b82c031dd9cfeb228effc197d05.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figure 8. Adding groups from the LDAP server<\/p>\n<p>6) In the pop-up window, click <em>Retrieve Groups. <\/em>If the groups have been retrieved, the preliminary steps have been completed successfully. Otherwise, try a different administrator and check the availability of ISE with the LDAP server via the LDAP protocol.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/66e2a33754432ed898fbd5a50c3c9caf.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figure 9. List of pulled user groups<\/p>\n<p>7) In the tab <em>Attributes <\/em>you can optionally specify which attributes from the LDAP server should be pulled, and in the window <em>Advanced Settings <\/em>enable the option <em>Enable Password Change<\/em>, which will force users to change their password if it has expired or has been reset. In any case, click <em>Submit <\/em>to continue.<\/p>\n<p>8) The LDAP server appeared in the corresponding tab and can be used for policy formation going forward.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/562760819cfcb601535d032d84267d2f.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figure 10. List of added LDAP servers<\/p>\n<h2>4. Integration with Active Directory<\/h2>\n<p>1) After adding the Microsoft Active Directory server as an LDAP server, we obtained users, user groups, but not logs. Next, I suggest setting up full AD integration with Cisco ISE. Go to the tab <em>Administration \u2192 Identity Management \u2192 External Identity Sources \u2192 Active Directory \u2192 Add.&nbsp;<\/em><\/p>\n<p><em><strong>Not\u0103: <\/strong><\/em>For successful integration with AD, ISE must be in the domain and have full connectivity with DNS, NTP, and AD servers; otherwise, nothing will work.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/f5530a66e45b8da3e84ba0b956ecc8bb.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figure 11. Adding Active Directory server<\/p>\n<p>2) In the pop-up window, enter the domain administrator's data and check the box <em>Store Credentials. <\/em>Additionally, you can specify OU (Organizational Unit) if ISE is in a specific OU. Then you will need to select the Cisco ISE nodes that you want to connect to the domain.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/ed8ee6219b3b89b7043d2bd0383209f6.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figure 12. Entering credentials<\/p>\n<p>3) Before adding domain controllers, ensure that the PSN in the tab <em>Administration \u2192 System \u2192 Deployment<\/em> has the option <em>Passive Identity Service<\/em>. <strong>PassiveID <\/strong>\u2014 o op\u021biune care permite translatarea User \u00een IP \u0219i invers. PassiveID ob\u021bine informa\u021bii din AD prin WMI, agen\u021bi AD specializa\u021bi sau portul SPAN pe comutator (nu este cea mai bun\u0103 op\u021biune).<\/p>\n<p><em><strong>Not\u0103: <\/strong><\/em>pentru a verifica starea Passive ID, introduce\u021bi \u00een consola ISE <strong>show application status ise | include PassiveID.<\/strong><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/fdef0f1d9989cecb54e0133311886e15.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figura 13. Activarea op\u021biunii PassiveID <\/p>\n<p>4) Accesa\u021bi tab-ul <em>Administration \u2192 Identity Management \u2192 External Identity Sources \u2192 Active Directory \u2192 PassiveID <\/em>\u0219i selecta\u021bi op\u021biunea <em>Add DCs<\/em>. Apoi, selecta\u021bi cu bif\u0103 controlerele de domeniu necesare \u0219i ap\u0103sa\u021bi <em>OK.<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/0c8e1c03913a6ea2df40ba097f718133.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figura 14. Ad\u0103ugarea controlerelor de domeniu<\/p>\n<p>5) Selecta\u021bi DC-urile ad\u0103ugate \u0219i ap\u0103sa\u021bi butonul <em>Edit. <\/em>Indica\u021bi <em>FQDN <\/em>al DC-ului dumneavoastr\u0103, numele de utilizator \u0219i parola domeniului, precum \u0219i op\u021biunea de conectare <em>WMI <\/em>sau <em>Agent<\/em>. Selecta\u021bi WMI \u0219i ap\u0103sa\u021bi <em>OK.<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/c484fbbc8c57a11eae3879088acd5186.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figura 15. Introducerea datelor controlerului de domeniu<\/p>\n<p>6) Dac\u0103 WMI nu este metoda preferat\u0103 de conectare la Active Directory, pute\u021bi utiliza agen\u021bii ISE. Metoda bazat\u0103 pe agen\u021bi const\u0103 \u00een faptul c\u0103 pute\u021bi instala pe servere agen\u021bi speciali care vor \u00eenregistra evenimentele de login. Exist\u0103 2 op\u021biuni de instalare: automat\u0103 \u0219i manual\u0103. Pentru instalarea automat\u0103 a agentului, \u00een aceea\u0219i tab-ul <em>PassiveID <\/em>selecta\u021bi op\u021biunea<em> Add Agent \u2192 Deploy New Agent<\/em> (DC-ul trebuie s\u0103 aib\u0103 acces la Internet). Apoi, completa\u021bi c\u00e2mpurile obligatorii (numele agentului, FQDN al serverului, numele de utilizator\/parola administratorului de domeniu) \u0219i ap\u0103sa\u021bi <em>OK.<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/9972907c37737e2b20c5e601724f054b.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figura 16. Instalarea automat\u0103 a agentului ISE<\/p>\n<p>7) Pentru instalarea manual\u0103 a agentului Cisco ISE, trebuie s\u0103 selecta\u021bi op\u021biunea <em>Register Existing Agent<\/em>. \u00cen plus, agentul poate fi desc\u0103rcat din tab-ul <em>Work Centers \u2192 PassiveID \u2192 Providers \u2192 Agents \u2192 Download Agent.<\/em><\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/5ecdabc1fa3b7236b0f88f47bf828576.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figura 17. Desc\u0103rcarea agentului ISE<\/p>\n<p><em><strong>Important: <\/strong><\/em>PassiveID nu cite\u0219te evenimentele <strong>logoff<\/strong>! Parametrul care controleaz\u0103 timpul de expirare se nume\u0219te <strong>user session aging time<\/strong> \u0219i este de 24 de ore \u00een mod implicit. Prin urmare, trebuie ori s\u0103 face\u021bi logoff personal la sf\u00e2r\u0219itul zilei de lucru, ori s\u0103 scrie\u021bi un script care s\u0103 efectueze logoff automat pentru to\u021bi utilizatorii conecta\u021bi.&nbsp;<\/p>\n<p>Pentru a ob\u021bine informa\u021bii <strong>logoff<\/strong> se utilizeaz\u0103 \u201eEndpoint probes\u201d \u2014 sonde finale. \u00cen Cisco ISE exist\u0103 mai multe tipuri de Endpoint probes: RADIUS, SNMP Trap, SNMP Query, DHCP, DNS, HTTP, Netflow, NMAP Scan. <strong>RADIUS <\/strong>probe cu ajutorul <strong>CoA <\/strong>(Change of Authorization) pachete ofer\u0103 informa\u021bii despre schimbarea drepturilor utilizatorului (pentru aceasta este necesar implementat <strong>802.1X<\/strong>), iar SNMP configurat pe switch-urile de acces va oferi informa\u021bii despre dispozitivele conectate \u0219i deconectate.<\/p>\n<p>Mai jos este un exemplu relevant pentru configura\u021bia Cisco ISE + AD f\u0103r\u0103 802.1X \u0219i RADIUS: utilizatorul este autentificat pe un PC cu Windows, f\u0103r\u0103 a se deconecta, autentific\u00e2ndu-se de pe un alt PC prin WiFi. \u00cen acest caz, sesiunea de pe primul PC va r\u0103m\u00e2ne activ\u0103 p\u00e2n\u0103 la expirare sau p\u00e2n\u0103 c\u00e2nd se va produce o deconectare for\u021bat\u0103. Atunci, dac\u0103 dispozitivele au drepturi diferite, dispozitivul autenticat ulterior va aplica propriile drepturi.<\/p>\n<p>8) \u00cen plus, \u00een tab-ul <em>Administrare \u2192 Managementul Identit\u0103\u021bii \u2192 Surse Externe de Identitate \u2192 Active Directory \u2192 Grupuri \u2192 Adaug\u0103 \u2192 Selecta\u021bi Grupuri din Director <\/em>pute\u021bi selecta grupurile din AD pe care dori\u021bi s\u0103 le importa\u021bi \u00een ISE (\u00een cazul nostru, acest lucru a fost realizat la punctul 3 \u201eAd\u0103ugarea serverului LDAP\u201d). Alege\u021bi op\u021biunea <em>Recupera\u021bi Grupuri \u2192 OK<\/em>.&nbsp;<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/044864b12c94528eded7a24b47452c6d.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figura 18 a). Importul grupurilor de utilizatori din Active Directory<\/p>\n<p>9) \u00cen tab-ul <em>Centre de Lucru \u2192 PassiveID \u2192 Prezentare General\u0103 \u2192 Tablou de Bord<\/em> pute\u021bi observa num\u0103rul de sesiuni active, num\u0103rul de surse de date, agen\u021bi \u0219i altele.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/387389282ba2fe54be4af0e4da37371b.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figura 19. Monitorizarea activit\u0103\u021bii utilizatorilor domeniului<\/p>\n<p>10) \u00cen tab-ul <em>Sesiuni Active<\/em> sunt afi\u0219ate sesiunea curent\u0103. Integrarea cu AD este configurat\u0103.<\/p>\n<p><img decoding=\"async\" alt=\"Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2\" src=\"\/wp-content\/uploads\/2020\/09\/85333b48e751c5d9dc9e44364a103dcc.jpg\" style=\"display:block;margin: 0 auto;\" \/>Figura 20. Sesiuni active ale utilizatorilor domeniului<\/p>\n<h2>5. Concluzie<\/h2>\n<p>\u00cen acest articol au fost discutate subiectele cre\u0103rii utilizatorilor locali \u00een Cisco ISE, ad\u0103ugarea serverelor LDAP \u0219i integrarea cu Microsoft Active Directory. \u00cen urm\u0103torul articol va fi abordat accesul de oaspe\u021bi sub forma unui ghid detaliat.<\/p>\n<p>Dac\u0103 ave\u021bi \u00eentreb\u0103ri legate de acest subiect sau ave\u021bi nevoie de ajutor pentru testarea produsului, contacta\u021bi-ne la <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/katalog\/cisco\/ise\"><u>linkul<\/u><\/a><\/noindex>.<\/p>\n<p>Urm\u0103ri\u021bi actualiz\u0103rile pe canalele noastre (<noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/tssolution\"><u>Telegram<\/u><\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.facebook.com\/groups\/tssolution.info\/\"><u>Facebook<\/u><\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/vk.com\/ts_solution\"><u>VK<\/u><\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/blog\"><u>Blogul TS Solution<\/u><\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/zen.yandex.ru\/id\/5c7d2162fa818600ae386a52\"><u>Yandex.Zen<\/u><\/a><\/noindex>).<\/p>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/520222\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u043e\u043c\u0443 Cisco ISE. \u0412 \u043f\u0435\u0440\u0432\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435&nbsp; \u0431\u044b\u043b\u0438 \u043e\u0441\u0432\u0435\u0449\u0435\u043d\u044b \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0430 \u0438 \u043e\u0442\u043b\u0438\u0447\u0438\u044f Network Access Control (NAC) \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043e\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0410\u0410\u0410, \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c Cisco ISE, \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430 \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0443\u0433\u043b\u0443\u0431\u0438\u043c\u0441\u044f \u0432 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044e LDAP \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044e \u0441 Microsoft Active Directory, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043d\u044e\u0430\u043d\u0441\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95331,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95330","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Cisco ISE: \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 LDAP \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0441 AD. \u0427\u0430\u0441\u0442\u044c 2 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-28T05:42:51+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-28T05:42:51+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cisco ISE: Crearea utilizatorilor, ad\u0103ugarea serverelor LDAP, integrarea cu AD. Partea 2 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Cisco ISE: \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 LDAP \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0441 AD. \u0427\u0430\u0441\u0442\u044c 2 | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-28T05:42:51+00:00","article:modified_time":"2020-09-28T05:42:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95330","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:07:33","updated":"2022-09-28 09:57:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/95330","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=95330"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/95330\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/95331"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=95330"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=95330"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=95330"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}