topic Re: Cisco ISE 3.1 implementation tips in Network Access Control

Cisco ISE 3.1 implementation tips

Yemmy — Thu, 26 Jan 2023 23:45:41 GMT

I am implementing Cisco ISE 3.1 and would appreciate any tips for a successful deployment. I am planning to start with basic discovery, enforcement, compliance and posture.

Any useful tips will be appreciated.

Regards.

Re: Cisco ISE 3.1 implementation tips

dalbanil — Thu, 26 Jan 2023 23:54:54 GMT

Hello Yemmy, the design of the same really depends on your requirements, but you can refer to the following useful guides to achieve the implementation:

Posture/Compliance:
https://community.cisco.com/t5/security-knowledge-base/ise-posture-prescriptive-deployment-guide/ta-p/3680273

Re: Cisco ISE 3.1 implementation tips

Greg Gibbs — Fri, 27 Jan 2023 00:06:12 GMT

@Yemmy... If you are new to ISE, you might want to start by checking out some of the various training videos available at https://cs.co/ise-webinars.

Re: Cisco ISE 3.1 implementation tips

balaji.bandi — Fri, 27 Jan 2023 06:15:30 GMT

Adding to other posts - Follow the link for planning :

https://community.cisco.com/t5/security-knowledge-base/ise-planning-amp-pre-deployment-checklists/ta-p/3622635

also suggested webinars help you use cases.

Re: Cisco ISE 3.1 implementation tips

Yemmy — Mon, 13 Mar 2023 18:13:12 GMT

Thank you all for your contributions. Currently we have installed the cisco ISE but the patch upgrade 5 is breaking the application. After the patch installation the cisco ISE keeps initializing perpetually. Has anyone seen this kind of error before?

Re: Cisco ISE 3.1 implementation tips

Tariq Mahmoud — Tue, 14 Mar 2023 11:23:21 GMT

I have recently installed two 3.1 nodes, patched them with patch 5 and they are working fine. My tips would be:
1. Try to set correct details from the first time, IP, subnet mask, hostname, domain, ntp,...etc it's not that you can't change them later, but this will save time and efforts.
2. Make sure they have correct resources (if they are VMs).

3. Don't enable any feature that you don't intent to use. This will improve ISE performance.

4. If you are using profiling, make sure to have only the needed attributes sent from NADs (switches, wireless controllers). profiling affects ISE resources heavily if not configured correctly.

5. Make sure to have correct DNS records for your ISE nodes, both forward and revers records are needed.

6. Don't overwhelm ISE with certificates, just keep those that you use and remove expired and those which are not in use.

Re: Cisco ISE 3.1 implementation tips

Yemmy — Fri, 24 Mar 2023 23:24:09 GMT

Please anyone with a step by step guide for cisco ISE, Having issues traffic from my switch is not getting to ISE.

I know I am not doing something right but what that is, I don't know. My network guy has done all the configurations recommended on the switch yet we are stalked

A step by step guide will be appreciated.

Re: Cisco ISE 3.1 implementation tips

balaji.bandi — Sat, 25 Mar 2023 08:02:31 GMT

Currently we have installed the cisco ISE but the patch upgrade 5 is breaking the application. After the patch installation the cisco ISE keeps initializing perpetually

First to fix the issue if this is a major - i will go and roll back to see work as expected.

If time permits - i go to TAC (to troubleshoot) - since you not have any logs to prove here that what is going wrong here. ?

Run the debug on the switch ( Having issues traffic from my switch is not getting to ISE.)

https://community.cisco.com/t5/security-knowledge-base/ise-secure-wired-access-prescriptive-deployment-guide/ta-p/3641515

https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/TrustSec_1-99/Dot1X_Deployment/Dot1x_Dep_Guide.html

Re: Cisco ISE 3.1 implementation tips

thomas — Mon, 03 Apr 2023 03:35:27 GMT

⭑ 🥇 ISE Resources: https://cs.co/ise-resources 🥇
⭑ ISE Webinars: https://cs.co/ise-webinars : First week of every month!
⭑ ISE YouTube Channel: https://cs.co/ise-videos : ISE Webinar archive and more!
⭑ ISE Training: https://cs.co/ise-training : YouTube, Cisco Live, and more!
⭑ ISE Community: https://cs.co/ise-community | How to Ask The Community for Help