topic Re: win10 machines not auth in monitor mode ISE after upgrading to win in Network Access Control

win10 machines not auth in monitor mode ISE after upgrading to win11

NetworkMonkey101 — Tue, 26 Aug 2025 12:22:08 GMT

I have a load of windows 10 machines which are in ISE but running monitor mode. After upgrading to Win11 they are not able to be on the network.

What could be causing this as there is no enforcement mode in place..

Re: win10 machines not auth in monitor mode ISE after upgrading to win

MHM Cisco World — Tue, 26 Aug 2025 13:25:12 GMT

Monitor mode is open so ISE don't authc endpoint.

Check SW config

MHM

Re: win10 machines not auth in monitor mode ISE after upgrading to win

Dustin Anderson — Tue, 26 Aug 2025 13:41:58 GMT

So, there are a lot of issues with windows 11 and 802.1x if you are using PEAP/MSChAPv2 The new credential guard in win11 will stop the computer form sending the user credentials. We don't know how your deployment is, so this is my best guess at the issue you are facing.

https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/considerations-known-issues

Re: win10 machines not auth in monitor mode ISE after upgrading to win

poongarg — Fri, 05 Sep 2025 08:27:13 GMT

First of all check, if ISE is receiving the authentication request. if yes, then if the authentication is successful on ISE and same policy is applied for windows 11 session as for windows 10.

Switchport is showing successful authentication?

If all is same then troubleshoot from windows perspective.