I have been asked by our security group to see if it is possible to check for minimum Windows version on a PC. This is for contractor PCs so we have no control over the PC. Also can we check the same group of PCs for security patches using ISE...
Forum Posts
Resolved! Security K9 package
Good Day to AllI am working in a major Oil and Gas project and we have below purchased material (Cisco ISR 4451)My question is is we install Security K9 package on it, will this router play Firewall role such as URL filtering? if yes, which functiona...
Hello,I have ISE nodes and I enabled web portal access for my devices portal. Per the Cisco ISE ports reference document, the needed ports are TCP/8000-8999, HTTPS, and TCP/25The problem is:1) Allowing HTTPS in the firewall will allow the end users t...
Hello, I'm setting up ISE 3.1 with posture assessment of Anyconnect VPN clients. The customer has a specific need to identify domain joined computers that will be used by employees over those that would be used by vendors, etc. I'm hoping to avoid us...
Hello all. I am currently experiencing an issue where the ISE Messaging Service will not start on the PAN. It cycles between "initializing" and "not running". I believe this is causing Context Visibility to display no data. So far, I have regenerated...
I am using ISE to provide network access control on a number of switches. The switch uses radius to ISE to authenticate ports using MAB and 802.1X. Is there a standard way to set a switch to allow all traffic if Radius/ISE is unresponsive?
Hi Team, I have Cisco FTD installed which is routing traffic between two subnets on "inside" interface. When we are copying files between these two subnets through SMB2 protocol, I can see that it's going very slow. When I did a capture, I came to kn...
Hello! So I have a bit of an interesting idea that I'm trying to accomplish. I currently have Splunk Cloud setup with an LDAP bind to my Azure AD setup and it works just fine. I also have a on-prem ISE setup that will force MFA for things like VPN an...
Hello guys.I'm having problems with my Cisco FTD 2140, at the moment of enabling the interfaces with SFP module. In the image below can see that when I enable the interface, it sends me that message.I'm using the interface Ethernet 1/13 with a SFP mo...
I am planning on migrating our ISE environment to smart licensing, however I found about 50 licenses for C1-ISE-BASE-AP on our cisco portal. I am not seeing that license on our ISE environment. We do use radius for ISE for our WLC access points. W...
Hi I have a question about how the ISE account for the number of concurrent sessions. I have a peak connection for a day eg. 1100 devices (some guests connected for a very short time )for 1 an hour sometimes, and in most of the day, only 300 devices...
Resolved! Is my FMC integrated with SecureX?
Apologies for the duff title and question in advance.I've registered using our CCO account and linked organisation and integrated FMC with SecureX and I can see events on SSE.However, "Enable SecureX" button is still in the SecureX Integration menu o...
Dear Team, I need a helpful article to know how to have a fully inside and outside integration between ISE and ASA to control inside and outside users (VPN users).
I have a ASA 5516X-FPWR. When I start ASDM it freezes at 28% while trying to authenticate Firepower. I access the FW via a local Management vlan. When I unplug the cable to the MGMT interface I can access the ASA. But if I plug it back in it will...
Hello all, I am working through setting up a Meraki AP to be integrated with ISE. I am following the document below as a start.https://community.cisco.com/t5/security-documents/how-to-integrate-meraki-networks-with-ise/ta-p/3618650#toc-hId--110192610...
