09-21-2017 11:03 AM
Is there any limitations on the AD groups ISE can use/discover? I am not seeing the same groups in ISE as I do when look in Active Directory Users and Computers
ISE 2.2
09-21-2017 11:38 AM
There is a limit on the number of records that can be retrieved at a time. In this case that number is 500
09-21-2017 11:43 AM
In case this is about the window [ Select Directory Groups ], that can only retrieve 500 groups per filter. Please adjust the filter to get to more specific groups of your choice.
If that is not the case, please provide more details. Or, engage Cisco TAC if not already done.
09-21-2017 12:15 PM
Thanks
Its returning 393 groups so we're not hitting the limit.
As an example , in AD there is a group entitled "Test" It doesn't show up when in the Retrieve Groups list or any combination I use in the the search filter.
09-21-2017 12:26 PM
Is it a security group? What is the group scope? ISE does not deal with distribution groups.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide