Is there a way to retrieve the Duo users/groups (duo is not integrated to any IDP such entra or AD, just a created duo users) into ISE for SGTs? I've already done the Entra integration, and I'm wondering if it's also possible to sync or retrieve grou...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Resolved! ENTRA ID Registered Devices
We are currently running fully on Microsoft Entra ID, and things are looking pretty solid so far.--> All our Entra‑joined (or enrolled) devices are authenticating using EAP‑TLS (device-based)--> We’re leveraging device group membership in Entra ID to...
Hi all,I am facing an issue with Cisco ISE 3.4 Patch 5 integrated with Entra ID for EAP-TLS wireless authentication.Environment:Cisco ISE 3.4 Patch 5Cisco 9800 WLCIntune Cloud PKIEntra ID integrationWireless 802.1X using EAP-TLSIssue:Authentication s...
Hi,Im looking for possibility to map endpoint certificate value "SAN:URI Intune ID/GUID" that will be used on ASA Remote VPN for client authentication and due to Intune MDM integration I need to send this SAN certificate value as CiscoAVpair/mdm-tlv...
Hello Everyone, Lately all ISE nodes become getting the warning message "Public CAs are updating certificate issuance criteria". According to technical advisory all related services with Public CA certificate will be affected after a while. What if w...
I have a PoC in my customer for Cisco ISE integration with Entra ID and currently I test it first on my lab.My customer only has Entra ID for the IDP and no on-prem AD.I use EAP-TLS and using ISE Certificate Provisioning Portal to generate endpoint c...
To configure Guest Wireless Access using ISE and WLC - Consider that ISE has a separate Interface in DMZ. Design perspective Anchor WLC should have separate Interface in DMZ as well ? or it should form a Mobility tunnel between Anchor and Foreign WL...
Good day team!from today, at a Live Logs http_s://ise1......com/admin/liveAuthenticationDetail.doon some detaled reports I seeNo Data available for this record. Either the data is purged or authentication for this session record happened a week ago. ...
Hello, I am trying to join ISE 3.4 VM with Active Directory but Its getting failed and I am getting below logs on ISE GUI. Error Description: Access is deniedSupport Details...Error Name: ERROR_ACCESS_DENIEDError Code: 5 Detailed Log:10:49:39 Jo...
Resolved! Intune - MDM
This question is more of an architecture question. Intune integration has been working fine with no issues. However, looking at this closer, I'm seeing that the PAN's cert is uploaded/trusted by the OATH app on the Azure-side of the connection. This...
Yesterday I upgraded an FMC from version 7.2.10.2 to 7.6.2.1. The FMC have a pxgrid connection to an ISE. After the upgrade i get a health monitor error to check connectivity to ISE. A test in identity sources on the FMC show no errors. Pxgrid servic...
Good day everyone.We are conducting a proof of concept with Azure MFA providing second factor authentication for RAVPN.Our parent agency owns the Azure AD that includes a user account for all our users in our agency.However, we own and manage an in-h...
Dear All, We are trying to integrate JAMF Pro with our Cisco ISE 3.3. Based on the documentation it's pretty straightforward, but it seems that it can be only used while connecting on WiFi using certificates. If we are connecting via VPN, ISE is stil...
Hello team! I configured a SAML integration with ISE and the authentcation and authz is working just fine. Now I am trying to fine tune it so ISE does not present its web portal and gets the client straight to the SAML web page, but I am not being ab...
Greetings Everyone, I'm new with Cisco ISE. we want to create separate rules in policy set for device type, Laptops and Gadgets. each of rules had an different vlan with diferent profiles. we use called-station id conditions to differentiate those de...
