Hopefully someone know the answer to this. I have Windows 11 25H2 running wired and wireless 802.1x using EAP-TLS in my environment with Cisco ISE 3.3 patch-12. Everything is working. My ISE 3.3 patch-12 does NOT have TLS 1.3 checked in the setting...
I have a Cisco ISE 3.5 Patch-4 cluster up and running for testing. I restored the ISE 3.3 Patch-12 configuration backup to this ISE 3.5 Patch-4 cluster seven days ago, and everything seems to be working fine. However, it has been a week and I am st...
We are troubleshooting Windows 11 native wired 802.1X using TEAP with EAP-TLS chaining against Cisco ISE 3.4. We are trying to determine whether anyone has successfully implemented the same configuration or has encountered similar Windows supplicant ...
Hello mates,I’ve seen this error while trying to do a posture update: “Feed cannot be generated or parsed”:We have it for two weeks now and we patched our deployment yesterday but the issue is still here. When I try a to update now, I see my proxy go...
How to re-authenticate multiple devices (MAB) 802.1x in a identity group, in Cisco ISE. I tried to re-authenticate under policy > Results > Authorization > Authorization Profiles. I checked the re-authentication parameter to 180 (sec), but any ...
Does isCompliant require an MDM integration in ISE (an MDM server entry under Administration > Network Resources > External MDM) to return a value, or can it be retrieved through the identity source connection alone?To note this attribute is a Device...
Hi all,i recently upgraded my ISE two-node deployment from 3.2 P11 to 3.5 P4. Before upgrading i had a look to ISE 3.5 compatubility documentation at this link https://www.cisco.com/c/en/us/td/docs/security/ise/3-5/compatibility_doc/b_ise_sdt_35.html...
Hello team,Running a deployment of 2 ISE (v3.4) both being Admin, Monitoring and PSN. I need to change their certificate, from self-signed to a PKI delivered certificate. New certificates are imported on the nodes, and now I’m trying to assess the im...
Hi team,I want to monitor Radius Drops and set trigger High/Warning/Low for this one, but it seems like can not using API.Anyone can help me or gimme some suggestion? (We have PRTG but not sure can using SMNP monitor this sensor)Thanks.
showing this error in ise logs in wired endpoint Event5411 Supplicant stopped responding to ISEFailure Reason12937 Supplicant stopped responding to ISE after sending it the first inner EAP-MSCHAPv2 messageResolutionVerify that supplicant is configure...
Hello,We have an ISE two-node deployment.Upgraded from 3.3 patch 12 to 3.4 patch 7.Trying to login to check the running services. I'm unable to login via CLI to the secondary. Access is denied.CLI and GUI access is working on the PAN. GUI is accessib...
If I use Dynamic AD Group to be used as part of ISE TEAP Authorization Rule ( Dynamic AD group is at Microsoft Entra ) should this be a problem ? In other words does ISE support the use of Dynamic AD Entra AD Group ?
I have ISE deployment on prem using physical servers. Would it be possible to add one or a few servers in AWS and join them to the existing deployment? I understand I need to get a VM license for each instance in AWS, but would I be able to run the...
Hi, we have implemented EAP-FAST with machine (eap-tls) and user authentication (MSCHAP). Secure client 5.0.05040. Everything works fine but one user is reporting that sometimes when he logs in, the secure client shows him error: An authentication er...
I am about to apply this hot patch ise-apply-CSCwu05826_3.5.0.527_patch3-SPA.tar.gz on my Cisco ISE 3.5 patch-3, and I have a question. If/when patch-4 becomes available and I decide to patch the cisco ISE cluster, does it mean patch-4 will overwrit...
