Network Access Control

Good day everyone.We are conducting a proof of concept with Azure MFA providing second factor authentication for RAVPN.Our parent agency owns the Azure AD that includes a user account for all our users in our agency.However, we own and manage an in-h...

Hi, We have integrated our ISE with two DUO authentication proxies (for tacacs access to our switches). We configured a radius token object and added the DUO auth proxies primary and secondary. The timeout configured is 60 seconds with 3 attempts. Wh...

Hello, I want to put MFA for some of my SSL VPN users. My clients are using AnyConnect to open their SSL VPN connection to a Firepower cluster. The firewall uses Radius to authenticate and authorize users via Cisco ISE. I have two identity stores.The...

Hello, I am going to integrate our cisco switches device admin access (TACACS) with Cisco ISE and DUO cloud with the user account located in our on-premises AD. The proposed flow was as follows Switch --> ISE ---> DUO Auth Proxy -->DUO Cloud The plan...

The environment is Cisco ISE 3.2 patch 4 and Cisco ASA 9.16.4.  The computer is a Win10 laptop running the latest Cisco Secure Client 5 (AnyConnect).  We have domain controllers hosted in Azure and also Enfra ID in Azure.  I previously setup ISE for ...

Hello all,I have a setup where ISE is to be configured to authenticate users to login on network devices (router/switch etc). We need the ISE to perform dual authentication of the user, means username/password (from AD)  and user certificate (NOT mac...

Hello, Does anyone have any documentation for this kind of implementation?  ISE v2.7.0.356 P6 Best Regards,

Hi,Looking through old posts it does not look like Windows Hello is supported. Can someone please verify that?Also I cannot see how the policy sets should be configuredTIA

We are looking to implement ISE/Azure MFA authentication on some network devices for admin auth, which we have successfully gotten to work.  But, some users log into these devices multiple times per day. Is there a way to control or limit the MFA aut...

Hi All, I'm trying to test the usage of DUO integrated with ISE. Is it possible to achieve dot1x authentication which can be utilized in both Windows/MAC supplicants? Is it possible to achieve the same with EAP-GTC via NAM client? Can anyone guide me...

Hello Everyone,My place of work is struggling with using the Cisco anyConnect VPN. I am on a student placement, so my networking knowledge is fairly fundamental (bare with me!), but I would really like to be the one to come up with a solution for thi...

I have been researching performing machine authentication for compliance reasons using our ASA applianaces and SSO with MFA. I am running into some road blocks. I know that we can use a AAA instance using Machine Certificates/Both and use our softwar...