I am currently working on device-based authentication and authorization against Microsoft Entra ID–joined devices using Cisco ISE 3.4 Patch 4.I followed the official Cisco documentation to configure the REST ID Store integration with Entra ID (includ...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Hello,We are rolling out 802.1X in our environment. Our Windows 10 workstations successfully authenticate using EAP‑TLS over TLS 1.2. However, our newer Windows 11 machines attempt authentication using EAP‑TLS with TLS 1.3 — and those attempts consis...
Hello everyoneDoes anyone has an experience with ISE (3.x) configuration related to 802.1x for wired clients connecting to network where identity lookup in AD shouldn't be done?We have some specific use case for clients who are issued with certificat...
I have a PoC in my customer for Cisco ISE integration with Entra ID and currently I test it first on my lab.My customer only has Entra ID for the IDP and no on-prem AD.I use EAP-TLS and using ISE Certificate Provisioning Portal to generate endpoint c...
Hi All, Greetings. we have an issue with Our Customer ISE 3.4 running on AWS (installed from AWS Marketplace) ==> BLANK Live log & Dashboard after we restore config from Existing ISE. Chronology: Before we installed the ISE 3.4 on AWS, we "try" to ...
Apologies for my lack of experience as I am still learning.I am trying to get FTD 7.2.4.2 to allow users to authenticate with a NPS on WinServer 2019. I am trying to log into the web GUI using my network credentials and it fails every time. In event...
Hi, not much familiar with MacOS, any advice on MacOS provisioning for BYOD ? its running Tahoe 26.0.1, I did posture update and the OS is supported, using CiscoTemportalAgentOSX 5.1.13.86 and MacOsXSPWizard 3.4.0.0 for result. it gets redirected, ...
I am running ISE 3.4 Patch 4 I have a condition that says If RESTEntraIDStore: External Groups Equals "MyEntraSecurityGroup" Permit access I know this should be possible from Patch 4 or 3.5 onwards.The device is definitely in the Entra Group, For th...
Morning World:TLDR:What value is EAP chaining providing me at this point in time? Is Machine authentication & posture assessment "good enough"? Because of our environment, machine cert fallback no longer works when a PKI certificate (User CAC Card)...
We had a situation where the Primary node became "unjoined" to the domain. This caused a widespread VPN connectivity outage because ISE couldn't verify credentials because it couldn't talk to Active Directory.Active Directory still had the machine ac...
We have observed a strange issue in our network. For any reason(change in profile) when Cisco ISE send a COA and ask to reauthenticate to an connected client on wireless controller client session is interrupted. Client tries to reconnect and we see c...
Resolved! Cisco ISE on Azure Cloud
Dear all , i`m planning to deploy Cisco ISE on Auze cloud and i have some questions1- is licenses cloud like on prime in the trial licenses mean in on prim there is a 90 day trial 2- i have 2 branches and more than 8 k users (phones , printer , wire...
Hi team, Change of Authority - Port bounce, not working on host-mode multi-domain fast ethernet interface. Unfortunate to say that the company I'm working for still has a few Cisco Catalyst 2960 series switches running on 15.0 firmware version. I am ...
Hello Community,I am trying to achive the following scenario:RADIUS requests from "staging Client" should be forwarded to our LAB-ISE.Sounds simple? Yes, and it works till the point the ACCESS-ACCEPT with a dACL is send back to the Authenticator and ...
Hi all;I am using ISE 3.2 with Patch 2 in my environment. I am using Device Administration module and configured my Catalyst switches to use ISE as the central point for authentication. When the AD user tries to change its password, sees the followin...
