We have encountered an unexpected issue. Despite trying various troubleshooting methods, we have been unable to identify the root cause. We would appreciate expert guidance and recommendations.Problem SummaryWe are experiencing an issue with Cisco IS...
We have a global deployment of multiples PSNs ( 2 US-WEST, 2 US-EAST, 2 EU and 2 APAC). Currently we have a single guest hotspot portal with a single URL (guest.portal.XXXXX.com). Each site has a local FortiGate which acts as the DHCP server and a lo...
Hi,We have a strange issue where devices that are in an identity group on ISE which in turn get authorised and download a DACL are falling off the network at seemingly random times.Example Switchport:interface GigabitEthernet2/0/23description "Exampl...
Hello, I am trying to join ISE 3.4 VM with Active Directory but Its getting failed and I am getting below logs on ISE GUI. Error Description: Access is deniedSupport Details...Error Name: ERROR_ACCESS_DENIEDError Code: 5 Detailed Log:10:49:39 Jo...
I implemented Cisco ISE using EAP-TLS for user authentication. Authentication works fine for the machine owner only. However, when other users log in to different machines, authentication fails because their certificates are not installed on those ma...
I am currently working on device-based authentication and authorization against Microsoft Entra ID–joined devices using Cisco ISE 3.4 Patch 4.I followed the official Cisco documentation to configure the REST ID Store integration with Entra ID (includ...
Hello,We are rolling out 802.1X in our environment. Our Windows 10 workstations successfully authenticate using EAP‑TLS over TLS 1.2. However, our newer Windows 11 machines attempt authentication using EAP‑TLS with TLS 1.3 — and those attempts consis...
Hello everyoneDoes anyone has an experience with ISE (3.x) configuration related to 802.1x for wired clients connecting to network where identity lookup in AD shouldn't be done?We have some specific use case for clients who are issued with certificat...
I have a PoC in my customer for Cisco ISE integration with Entra ID and currently I test it first on my lab.My customer only has Entra ID for the IDP and no on-prem AD.I use EAP-TLS and using ISE Certificate Provisioning Portal to generate endpoint c...
Hi All, Greetings. we have an issue with Our Customer ISE 3.4 running on AWS (installed from AWS Marketplace) ==> BLANK Live log & Dashboard after we restore config from Existing ISE. Chronology: Before we installed the ISE 3.4 on AWS, we "try" to ...
Apologies for my lack of experience as I am still learning.I am trying to get FTD 7.2.4.2 to allow users to authenticate with a NPS on WinServer 2019. I am trying to log into the web GUI using my network credentials and it fails every time. In event...
Hi, not much familiar with MacOS, any advice on MacOS provisioning for BYOD ? its running Tahoe 26.0.1, I did posture update and the OS is supported, using CiscoTemportalAgentOSX 5.1.13.86 and MacOsXSPWizard 3.4.0.0 for result. it gets redirected, ...
I am running ISE 3.4 Patch 4 I have a condition that says If RESTEntraIDStore: External Groups Equals "MyEntraSecurityGroup" Permit access I know this should be possible from Patch 4 or 3.5 onwards.The device is definitely in the Entra Group, For th...
Morning World:TLDR:What value is EAP chaining providing me at this point in time? Is Machine authentication & posture assessment "good enough"? Because of our environment, machine cert fallback no longer works when a PKI certificate (User CAC Card)...
We had a situation where the Primary node became "unjoined" to the domain. This caused a widespread VPN connectivity outage because ISE couldn't verify credentials because it couldn't talk to Active Directory.Active Directory still had the machine ac...
