Hi all,We are running Cisco ISE 3.2 Patch 7 (6 nodes, no dedicated MNT).We’re seeing an issue where not all endpoints imported via API from an external identity source are showing up in Context Visibility.Cisco documentation suggests resetting and re...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Cisco Guest Portal is not working when internet is not working. But my guest portal is hosted in Cisco ISE (PSN) which is internal and DNS server as well.
Dear All, We are using ISE version 3.1. Users are accessing the internal network via wireless connectivity on WLC 9800-L version 17.9.4. We have configured a posture lease (1 day), enabled LSD, and no PRA. Here's the issue: Users are random...
I configured posture policy which use (windows 10(all)) as operating system criteria. and all posture conditions using windows 10 also. but windows 11 PCs still be scanned for posture. Note : posture requirements still in audit state. Can someone exp...
Hello,I've been poking around at the various ISE APIs including exporting endpoints via context visibility (CSV file exports) and not finding a way to export the endpoint WITH the inactivity days attribute. We have devices that the users may not tel...
Resolved! ISE Patch Question
I have a 4 node deployment - I plan on patching the via CLI and start with the PAN first - PSN Second and the Sec PAN third, but when the below question is presented do I need to say no in order to continue patching the remaining nodes individually?...
Hello, Could you please provide us with support? We are currently facing authentication issues with Cisco ISE after enabling biometric and facial recognition login for our users. Since the biometric feature was enabled, we have noticed that Cisco ISE...
Post 3.4, patch 4, Replication stop between PAN and PSNs, error, Jediss replication failed, CLI access issue-error failed to connect to the server. throwing an error in the debug log : Error, Failed to connect to server, could not connect to test-ise...
ISE Upgrade Incident SummaryOverview: ISE 1 and ISE 2 were upgraded from version 3.3 to 3.4. The upgrade did not go smoothly because the upgrade on ISE 2 failed partway through.Timeline and ObservationsPre-upgrade: The bonded interface for Gi0 was do...
We have encountered an unexpected issue. Despite trying various troubleshooting methods, we have been unable to identify the root cause. We would appreciate expert guidance and recommendations.Problem SummaryWe are experiencing an issue with Cisco IS...
Hello, After installing Patch 8 on Cisco ISE version 3.3 Patch-7, we have observed a significant increase in /opt disk utilization. The disk usage increased from approximately 22% to 56% within one month after the patch installation and this is only ...
Hi everyone,I'm struggling with a DAP (Dynamic Access Policy) behavior on FTD 7.4 when switching from direct LDAP to ISE (RADIUS).Current Setup & Goal:Users authenticate via ISE (AnyConnect VPN).ISE performs Posture Assessment (Posture is mandatory, ...
Hello!We tried to upgrade our ISE 3.2 on VMWare (patch 3,4 and 7) to 3.3 using the upgrade bundle, but got the same result:the appliance becomes a brick after reboot, which is included in upgrade process. No logs are available after that reboot, and ...
We are trying to make auth work in Grafana via Cisco ISE and RADIUS protocol through OAuth, and we have managed to get this working by using Cisco AV-Pair dictionary attributes. In order to granularly authorize access to differnt dashboards, I need o...
Hello,I have been experiencing a number of Windows endpoints failing 802.1x authentication with the failure reason of "12535 The EAP-TLS session ticket received from supplicant is expired". When this occurs the endpoint's Wired Event log shows this ...
