Network Access Control

Dear forum-goers,I'd like to completely block all ICMP 13 (Timestamp Request) and 14 (Timestamp Reply) on my network. I have about a dozen Cisco 9000 series switches and a Cisco firewall. How would you recommend going about doing so? Apply an ACL to ...

Hello Cisco TAC,We are planning to move one of our existing Cisco ISE nodes to a new virtual machine/VMware host and would like to confirm the safest supported procedure.Our current Cisco ISE version is:Cisco ISE 3.2.0.542 Patch level: 4 and 7 Curren...

hiwe expended our ISE deployement with another PSN node, and there's a symbol in front of the new server, which is not present at the other nodes. I cannot find an explanation what this means?  

Hello Team,I have configured posture policy (AnyConnect ver 5.1.14) for window 10, 11 its working fine but since few day there are few users experiencing intermittent issueOne device requires Wi-Fi posture re-validation approximately every 30 minutes...

Hi AllWe are evaluating some microsegmentation products, they effectively use ACLs to enforce on each port, trustsec isnt possible as wee have lots of older switches.Has anyone successfully implemented third party segmentation products using Cisco sw...

I am currently on cisco ise version  3.3.0.181 and planning to upgrade to 3.5. I have two nodes a primary and a secondary. What is the best way to prepare for the upgrade and method split or full upgrade. Can you also tell me what gotchas you ran int...

Hello, has anyone had experience deploying an ISE VM from Azure Marketplace to an on-premise Azure Local deployment? I can't find the process documented anywhere but as Azure Local sits on top of Hyper-V I would like to think it would work. 

Hi,I found Cisco ISE supported ManageEngine Endpoint Central - Agent for posture, how about ManageEngine Desktop Central?In the latest Compliance Module v4.3.6211.8192 document, the ManageEngine Desktop Central was listed under category Unclassified....

Hi all,I'm experiencing an issue with the Cisco AnyConnect Network Access Manager (NAM) client.EnvironmentCisco ISE with Machine + User Authentication (802.1X)Cisco Secure Client (NAM + Posture only)Windows clientsNot using VPNIssueWhen User A logs i...

Is there a way to retrieve the Duo users/groups (duo is not integrated to any IDP such entra or AD, just a created duo users) into ISE for SGTs? I've already done the Entra integration, and I'm wondering if it's also possible to sync or retrieve grou...

Hi there again,I'm stuck on a DHCP issue for VoIP phones in a Meraki Access Manager environment and I'm not really sure how to solve this.I'm able to authenticate both devices to access manager, but the phone never gets an IP via DHCP. I'm gonna expl...

Hi all, I'm in the process of preparing for this exam and was wondering if anyone knows on which ISE version this exam is based?

Hi Also upgraded to latest ISE 3.5.0 patch 1. Switchports started failing with Could not parse the cts-pac-opaque attribute also cts data empty show cts environment-dataCTS Environment Data====================Current state = STARTLast status = Failed...

Anyone else notice this issue with patch 7 of 3.2? Just opened a TAC case because our PSN memory usage has been going up for 2 weeks straight since updating to patch 7 from patch 6. Guessing as a small workaround until more is know maybe I can reboot...