Network Access Control

Hello Team,I have configured posture policy (AnyConnect ver 5.1.14) for window 10, 11 its working fine but since few day there are few users experiencing intermittent issueOne device requires Wi-Fi posture re-validation approximately every 30 minutes...

Hi AllWe are evaluating some microsegmentation products, they effectively use ACLs to enforce on each port, trustsec isnt possible as wee have lots of older switches.Has anyone successfully implemented third party segmentation products using Cisco sw...

I am currently on cisco ise version  3.3.0.181 and planning to upgrade to 3.5. I have two nodes a primary and a secondary. What is the best way to prepare for the upgrade and method split or full upgrade. Can you also tell me what gotchas you ran int...

Hello, has anyone had experience deploying an ISE VM from Azure Marketplace to an on-premise Azure Local deployment? I can't find the process documented anywhere but as Azure Local sits on top of Hyper-V I would like to think it would work. 

Hi,I found Cisco ISE supported ManageEngine Endpoint Central - Agent for posture, how about ManageEngine Desktop Central?In the latest Compliance Module v4.3.6211.8192 document, the ManageEngine Desktop Central was listed under category Unclassified....

Hi all,I'm experiencing an issue with the Cisco AnyConnect Network Access Manager (NAM) client.EnvironmentCisco ISE with Machine + User Authentication (802.1X)Cisco Secure Client (NAM + Posture only)Windows clientsNot using VPNIssueWhen User A logs i...

Is there a way to retrieve the Duo users/groups (duo is not integrated to any IDP such entra or AD, just a created duo users) into ISE for SGTs? I've already done the Entra integration, and I'm wondering if it's also possible to sync or retrieve grou...

Hi there again,I'm stuck on a DHCP issue for VoIP phones in a Meraki Access Manager environment and I'm not really sure how to solve this.I'm able to authenticate both devices to access manager, but the phone never gets an IP via DHCP. I'm gonna expl...

Hi all, I'm in the process of preparing for this exam and was wondering if anyone knows on which ISE version this exam is based?

I have issues with the way how Cisco designed the ISE service to be restarted every you time you make changes to the DNS and/or NTP configuration.  The underlying system is based off Redhat Linux, so what actually changes is under /etc/resolv.conf fo...

Hi Also upgraded to latest ISE 3.5.0 patch 1. Switchports started failing with Could not parse the cts-pac-opaque attribute also cts data empty show cts environment-dataCTS Environment Data====================Current state = STARTLast status = Failed...

Anyone else notice this issue with patch 7 of 3.2? Just opened a TAC case because our PSN memory usage has been going up for 2 weeks straight since updating to patch 7 from patch 6. Guessing as a small workaround until more is know maybe I can reboot...

Three Articles caught my attention before testing Posture with Debian 12 (code-name Bookworm) ... 1. the Release Notes for Cisco Secure Client,  Release 5.1: Web Deployment for DEB (Debian) installation is not currently supported. Modules provided wi...