Hi Team,I am a starter to ISE. I have some thoughts, don't know if the deployment below works:1) ISE1 on SiteA, managing devices on SiteA 2) ISE2 on SiteB, managing devices on SiteB3) VPN Tunnle between SiteA and SiteB, ISE1 and ISE2 can communicate ...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
I have an ISE 2.7 cluster with 4 nodes. 2 each of PSN and PAN. each of the 4 nodes has a stand-alone self-signed pxgrid certificate on it that expires on 3/20/2024. We do not use pxgrid on that cluster, nor is the cluster configured for anything pxgr...
Resolved! Cisco ISE Migration from 2.4 to 3.1
We currently have ISE- 5 node cluster with 2 node for PAN and 3 nodes for PSN and currently running 2.4 version.We need to upgrade to 3.1 which is currently the suggested stable release.All integrations like AD, SMS gateway etc are active on the curr...
Resolved! ISE EAP-TLS wireless queries
can someone pls clarify on EAP-TLS authentication in ISE for wireless networks.1. For EAP-TLS to work is AD certificate store (PKI) mandatory?2. Can ISE server as PKI when user logs into SSID using AD credentials3. Is EAP-TLS possible in non-AD joine...
We are in ISE 3.2.0.542 patch 3. Suddenly when i added new switch and deployed ISE with monitor mode. Live logs shows up device but Endpoint profile shows blank in itand If i go to context visibility > endpoints. These endpoints arent present there. ...
Resolved! ISE causes infinity login Windows 10
I been having issues with ISE on my Lan, I will try to give as many details as I can.The main issue is an Infinity Login on windows 10 for every user, but if I remove all the authentication config from the switch then it log in just fine. The desirab...
Hello,I have created a user in Administration/Idendities and this one doesn't appear in the page :Have you an idea why ?Regards
Dear all:The wildcard guest public certificate has to be renewed. The business did not create a wildcard certificate, and I'm not sure if checking the box will suffice for it works weel(the CN in the certificate is different, but if the domain is the...
Is it possible to set a maximum value for ise cpu alarm? for exampleWhen cpu is at 60%, A cpu high alarm will appear. If notAt what percentage of CPU is the alarm displayed?
We are testing device classification through ise profiling. When I turn on random macIn the case of Android, CoA occurs automatically and the endpoint appears to be Android through reauth. Apple does not automatically become CoAEven if you forcefully...
hello. We are building a network using ise's profiling function. Authentication was successful, butIf you check the other attributes in endpoints, the OUI value appears to be UNKNOWN. What is the problem?
Hi Team,The Nessus Scanner in our Network has reported a Vulnerability "HSTS Missing From HTTPS Server (RFC 6797)" under the Plugin ID: 142960.The details about the Vulnerability are mentioned below. I wanted to mitigate this Vulnerability on CISCO I...
I upgraded cisco switch 2960x to 9300 and copied all configurations from 2960x to 9300 and I didn't have any syntax errors, however the hosts cannot be authenticated by ISE when they try to access the Internet. On the intranet everything is fine. I a...
Hello All,I have Cisco ISE 2 nodes (PRI and SEC) running 2.7 with patch 7We were planning to install patch 8. As per Cisco release notes, it is suggested to remove hotpatch for log4j before installing or upgrading patch.After removal of hotpatch from...
I am using WLC5520 and I am using it in conjunction with ISE. When ISE is redunduancy, is there a way to know which ise the client authenticates with? For example via debug or guiI was wondering if there is a way to check.
