Network Access Control

Hi,We are facing attacks from Russia, most likely brute-force. We have received information and confirmed that the attacks come from several IP addresses, mainly these three:45.141.0.0/1677.221.0.0/16194.26.0.0/16We have added these IP addresses to t...

Hi, We're currently implementing posture with Cisco ISE, and we've successfully configured policies and used dACLs (Downloadable ACLs) for wired and VPN connections. However, we're facing an issue with ISE Posture on WiFi as we can't use dACLs on the...

Hello, Hope you are doing well. I have an interesting case that has been bothering me for over a month. Long story short - We did migration on customer ISE deployment from 2.7 to 3.2. Everything works correctly except VPN connection to customer netwo...

Hello, I added OKTA to ISE as a Radius Token server, and it works fineOKTA return RADIUS attribute "25 Class" for each group, example class attribute :ou=group1ou=group1;ou=group2I see on Radius token server / authorization, I can configure CiscoSecu...

I am in the process of changing our 5506 series ASA to point from our old AAA servers over to our ISE nodes (current AAA servers). I have added the ASA into the network device list and created a policy set for the ASA. I have also replaced the AAA se...

Hello,I am trying to implement some Posture checks for MacOS X when users connect to VPN. I was able to get some simple conditions to work, such as verifying that the Anti-Malware software is installed and up-to-date, but I need to do one more test: ...

hi all.  we try to integrate ivanti mobile iron and cisco ISE.  But we couldnt send the deviceuniqueidentifier key with GUID variable on cisco secure client apple ios therefore Cisco ISe can not send to a query to the ivanti mdm during cisco secure c...

Hi everyone, Sorry to bother you, but I wanted to ask if any of you know how to solve this problem or if you have any recommendations.I have checked and updated what it indicates, but I still can't access my VPN.Thank you in advance!       

 I urgently need help with an access problem on ACS with MSCHAP-V2 protocol. The client is connecting to our ASA in AnyConnect and RADIUS authentication is happening between our ACS and the client's Windows server. That client is pushing hard to swit...

Hello! Our management wants to implement a Microsoft Authenticator based second factor to our ISE vpn. Now we are using the ISE (FTD) vpn with only on-prem AD auth, and my question is how can we implement this Microsoft (Azure) Authenticator? Is ther...

Can't get DHCP Addresses from server after setting dot1x policy on switch.HELP!!

HiSo basically I have this problem I have eve ng VM and inside of it I'm installing ise primary node and secondary node and AD so I configured a NAT pool on the router and I control those equipements with internet addresses, so now I make a MGMT PC a...

 Hi All,Wondering if anyone is using ISE 3.0 REST ID with Azure AD ? https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/216182-configure-ise-3-0-rest-id-with-azure-act.htmlIf yes, once you've added Azure AD as an External Id...

SW2(config)#aaa server radius dynamic-authorSW2(config-locsvr-da-radius)#client 192.168.100.210 server-key Test123SW2(config-locsvr-da-radius)#client 192.168.100.220 server-key Test123Those commands means that we set AAA server (ISE1 and ISE2 in this...