We are troubleshooting Windows 11 native wired 802.1X using TEAP with EAP-TLS chaining against Cisco ISE 3.4. We are trying to determine whether anyone has successfully implemented the same configuration or has encountered similar Windows supplicant ...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Hello Team,greetings.I am seeing a strange behaviour with users, like when first they connect to LAN, laptop is trying to authenticate with MAB and hitting to MAB policy and failing as result "15039 Rejected per authorization profile". we have flow l...
I'm seeing this in my log, but everything is working as it should."AD: ISE account password update failed".Everything looks normal under:Administration --> External Identity Sources --> Active DirectoryMy ISE is running 3.4 Patch 6Cisco Bug IDs: CSCw...
Hello, i get the message when i try to test the connectivite between my switch and ise:Attempting authentication test to server-group ISE using radiusNo authoritative response from any server.I assum that the cnfig in switch is correct and i can reac...
Hey all,Given the recent CVEs we wanted to patch our deployment to 3.4 P7.While preparing, I heard from some colleagues that Cisco TAC had reports of issues related to the patches released on Sept 14. Apparently customers report that patching might b...
According to the below URL, for ISE 3.4 and 3.5, AWS EC2 instance type m5.4xlarge is not supported for medium deployment as an admin node. However, I don't see any issues installing or operating the admin nodes with this instance type, and the CPU/R...
I have been trying to upgrade an ISE 3.3 Patch 9 deployment to version 3.5 and am having issues with the URT running on the Standby Node. This ISE deployment is a small deployment with only two nodes, a PAN and a SAN node. When running the URT, I get...
I have tried 6 times deploying ISE from scratch. Whatever credentials I put-in during initial deployment doesn't work later in CLI but the same credentials always works in the GUI admin credentials. The image which i am using for deployment is "Cisco...
Hi, wondering if anyone can help.We have a Cisco ISE deployment. We need to use an external RADIUS server for 1 of our SSIDs. We want to control what VLAN that user is dropped into, however the external RADIUS is returning a VLAN ID. Normally I woul...
Hi Cisco Community Members,We are planning to install Cisco ISE 3.5 Patch 4 in our production environment to address the recently published critical security vulnerabilities (CVE-2026-76460, CVE-2026-20130, CVE-2026-20192, CVE-2026-20194, CVE-2026-20...
Hello,I am trying to implement 802.1x using EAP-TEAP along with smart card authentication. I selected EAP-TLS as primary and secondary EAP method and chose "Use Smart Card" in both options. But the authentication always fails and the user is unable t...
Hi all,I just upgrade ISE from 3.1 to 3.4 P6 and got an alarm like pictureAnyone might explain to me what it is and how to fix it? I have checked configuration on the switch and there is no command "aaa accounting update periodic"The existing: "aaa ...
Resolved! ISE patching partially for testing
HelloIs it possible to patch only some nodes in the deployment for evaluating patch behaviour?Let's say I have 6 nodes,is it possible to patch only 1 pan and 2 PSN, and when all is fine, continue the patching 2 or 3 days later?Is it possible from gui...
Hello,A question of interpretation with this new Advisory.A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.This vulnerability is due to insufficient authenticat...
Cisco has released a security Update containing security patches for multiple vulnerabilities. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and security restriction bypass on the targeted system...
