Network Access Control

I need advice from experts on this forum regarding a very strange issue that occurred in March 2025 at my current workplace, one month before I joined the company. We have a Cisco ISE 3.1 Patch 10 cluster deployed across two data centers as follows: ...

Good day team!from today, at a Live Logs http_s://ise1......com/admin/liveAuthenticationDetail.doon some detaled reports I seeNo Data available for this record. Either the data is purged or authentication for this session record happened a week ago. ...

I am using Cisco Secure Client 5.1.8 on macOS 26.2. VPN connection succeeds but ISE Posture fails with AM_A_MAC_REQ showing Required product not found. Apple native protections like XProtect, Gatekeeper, Firewall and FileVault are enabled and posture...

Hi everyone,I am planning a complex migration of a Cisco ISE 3.4 cluster (2 nodes, PAN/PSN) and I need a "golden" sequence of steps to avoid database corruption and SSL discovery issues.Current Situation:Nodes FQDN: srv-ise-0x.user.zvit.local (Joined...

Hi,Has anyone been able to successfully deploy ISE in Azure using expressroute from on-premise to the cloud.We have had ISE running in Azure for about 3-4 months now and have noticed a large amount of fragmentation using EAP-TLS. The Cisco guide sugg...

Hi there,Im having som trouble setting up PassiveID in a new ISE install.ise version 3.4 patch 4I have 3 nodes, all of them have passiveid enabled, and i can see the service running in cli with 'sh app stat ise'in the ise passiveid-agent.log i see th...

Hi all I have one situation: Cisco ISE 3.4 P3 2x NodesCustomer with multiple buildingsVLANs per BuildingThey don´t use named vlansNADs Meraki MS150For the policie sets we are filtering the (Device location and Radius Nas Port Equals Ethernet) But the...

I am looking for some documentation to configure TEAP for Entra Joined Device and Entra Joined User when user will be using Wireless. Assume that there is no Wired Connection and user will be using TEAP using Wireless. Then user booted the machine ho...

Hello, After installing Patch 8 on Cisco ISE version 3.3 Patch-7, we have observed a significant increase in /opt disk utilization. The disk usage increased from approximately 22% to 56% within one month after the patch installation and this is only ...

Hi, Our customer is using 2xCisco ISE 3.4 P3 integrated with AD. They have two domains xyz.com and aaa.com. Cisco ISE is configured at the domain xyz.com We are using TEAP for dot1x and the computer authentication is working. Only the user authentica...

TAC support has gotten really bad for the past few years.  I've many cases opened and it just drags on for months without any resolutions.  The TAC engineers are not very responsive.  For example, I opened a TAC case on 06/24 for an issue.  I got a r...

Hello, Could you please provide us with support? We are currently facing authentication issues with Cisco ISE after enabling biometric and facial recognition login for our users. Since the biometric feature was enabled, we have noticed that Cisco ISE...

Hello,I have been experiencing a number of Windows endpoints failing 802.1x authentication with the failure reason of "12535 The EAP-TLS session ticket received from supplicant is expired".  When this occurs the endpoint's Wired Event log shows this ...