Hi Guys,We have an old active ISE, and a new ISE that is configured but not yet in use. We want to make the new ISE as active, and get-rid of the old one.For that, We want to change the new ISE IP to be the same as the old one, and then, all the devi...
Hi all, fairly new to ISE but have done quite a bit of reading up.I have a problem with setting up the Alcatel Onmi switch rules. When i create a device profile for MAB for the Alcatel switches, the rule says if condition "device is part of group and...
Hi Expert, When logging into a router or switch(NADs), is it possible to have the query go to the ISE, and the ISE go to the AD to query the user's credentials?If so, would Device Administration (TACACS+) be required?ISE version 3.0 and NADs are C...
Hello everyone.We are going to use Cisco ISE for verify a compliance on clients using a posture check. But we must use a different VPN Gateway (not Cisco and not Cisco Anyconnect) so it is our country legislation requirement.Please, look at my pictur...
Hi Guys,I'll try to explain what I have and what I need. In my company we have 2 Domains :1. Regular2. Power Domain [it's just a name]both Domain have similar users, just with different extension, for example : [email protected]@power.regular....
Hi,I've installed ISE 3.0.0.458 When trying to telnet ISE IP's from a network devices with port 49, I'm getting connection refused. I have an old ISE that is working well, and when running on CLI show ports I can see this :tcp: 169.254.0.228:49, 25.5...
Hello ALL,I hope they’re okay!We have 2 Firepower 4110 in version 6.6.1.We need to create rules based on Active Directory groups.Unfortunately the configuration is not working, the created rule is being ignored (please see in the pictures).We are usi...
Hello everyoneIn our network we have the ISE , FMC and AD working in our network where all workstation have anyconnect installed for authentication and posture checkingwe are planning for the FMC for user awareness so we are able to make rules / moni...
Hi, We are interested in Cisco Umbrella, but I do not understand what Cisco Umbrella offers that OpenDNS Free does not. Understanding that Cisco Umbrella is for business users and Open DNS for home users. Do they offer the same features and the gener...
Hi everyone ,i have deployed two cisco ISE nodes in distribution mode and i need to purchase a license for them ,the question is , do i need to purchase two license one for each node or to purchase one license for the two nodes ? thanks .
Good Morning, I have a question and hope that one of you can help me. I'm looking for clear information on how to use the Smart NIC module on an ASA (not Firepower) image.The information that I am finding is not very clear, ASA is mentioned, but in c...
Hello;Can ISE provide SimpleSaml Authentification of some Web Services?I havent found useful Information on the Web.We are using ISE2.7 at the moment.Greetings, Thomas
Doing a conversion to office 365. O365 needs access to barracuda archiver on inside network.Inside archiver is at 192.168.1.240outside address 199.36.135.99Created translation and access rules.Access rules allow port 443, 80 , 8000 and 25.https:/ and...
In review of the Cisco documentation regarding enabling AD or LDAP authentication for Admin access to the ISEcisco.com/c/en/us/support/docs/security/identity-services-engine/200891-Understanding-Admin-Access-and-RBAC-Poli.html#anc7 We have both AD a...
I had ssh access to my FMC built on KVM until my server guys rebuilt the server and put the VM back on there. Now all I have is GUI access. The FMC log states "pam_unix(sshd:auth) auth failure for admin." So I created another account, gave it admi...
