Allow CRL
Checks (Not applicable for a Mac OS X client)
|
Yes
|
Overwrite
|
If the
value is set to No, this setting turns off checking the certificate revocation
list (CRL) during discovery and negotiation.
|
MAC
Address Exemption List (Not applicable for a Mac OS X client)
|
Enter
MAC addresses separated by a comma. For example, AA:BB:CC:DD:EE:FF,
11:22:33:44:55:66
|
Merge
|
If you
specify one or more MAC addresses in ths setting, the agent does not advertise
those MAC addresses to Cisco ISE during login and authentication to help
prevent sending unnecessary MAC addresses over th network.
|
Discovery
Host (Not applicable for a Mac OS X client)
|
Enter
the IP address or the fully qualified domain name (FQDN)
|
Overwrite
|
This
setting specifies the Discovery Host address or resolvable domain name that the
agent uses to connect to Cisco ISE in a Layer 3 deployment.
|
Enable
Discovery Host (Not applicable for a Mac OS X client)
|
Yes
|
Overwrite
|
Yes—User
can specify a custom value in the Discovery Host field in the agent Properties
dialog box.
No—Ensure that the user cannot update the value in the Discovery
Host field on the client machine.
|
Server
Name Rules
|
Enter the
fully qualified domain name (FQDN) of the Cisco ISE server that are separated
by a comma.
|
Merge
|
This
field consists of comma-separated names of associated Cisco ISE servers. The
agent uses the names in this list to authorize Cisco ISE access points. If this
list is empty, then authorization is not performed. if any of the names is not
found, then an error is reported.
|
Auto-generated MAC Address (Not applicable for a Mac OS X
client)
|
—
|
Merge
|
This
setting supports Evolution-Data Optimized connects on the client machine. if
the client machine does not have an active network interface card, the agent
creates a dummy MAC address for the system.
|
SWISS
Timeout (Not applicable for a Mac OS X client)
|
1—Agent
performs SWISS discovery as designed and no additional UDP response packet
delay time out value is introduced.
|
Merge
|
If the
value is set to greater than one, the agent waits the additional number of
seconds for a SWISS UDP discovery response packet from Cisco ISE before sending
another discovery packet. The agent makes this action to ensure that the
network latency is not delaying the response packet en route. (SWISS Timeout
only for UDP SWISS Timeouts)
|
Disable
L3 SWISS delay (Not applicable for a Mac OS X client)
|
No
|
Merge
|
If this
setting is set to Yes, the agent disables the ability to increase the
transmission interval for Layer 3 discovery packets. Therefore, the Layer 3
discovery packets repeatedly go out every 5 seconds, just like Layer 2 packets.
|
HTTP
Discovery Timeout (Not applicable for a Mac OS X client)
|
30
(Default for Windows clients)
The
valid range is 3 seconds and above.
|
Merge
|
This
setting specifies the HTTP discovery timeout for which the HTTPS discovery from
the agent waits for the discovery response from Cisco ISE. if there is no
response for the specified time, then the discovery process times out.
If the
value is set to 0, then the default client machine operating system timeout
settings are used.
If the
value is set to 1 or 2, automatically the value is set to 3.
|
HTTP
Timeout (Not applicable for a Mac OS X client)
|
120
(Default for Windows clients)
The
valid range is 3 seconds and above.
|
Merge
|
This
setting specifies the HTTP timeout for which the HTTP request from the agent
waits for the response. if there is no response for the specified time, then
the request times out, and the discovery process times out.
If the
value is set to 0, then the default client machine operating system timeout
settings are used.
If the
value is set to 1 or 2, automatically the value is set to 3.
|