Instead of AnyConnect client to do endpoint posture assessment, can Crowdstrike agent be used to do endpoint posture assessment with ISE 3.0?
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
My organization is working on migration path to Win11 (Entra joined), with hybrid user accounts. According to the below posting, it was mentioned that TEAP (EAP-TLS) is not supported for Computer authentication or EAP-Chaining.Cisco ISE with Microsof...
Resolved! Dynamic Vlan -Voice using Cisco ISE
Hi all,we have planning to deploy Wired voice handset solution using Dynamic vlan via Cisco ISE.Currently we have vlan 10 as the default vlan and Dynamic vlan for new voice handsets are set for vlan 495.Now my question is , in case Cisco ISE goes dow...
We currently have one CA configured in ISE that is trusted for client authentication for a specific customer. Recently, I was asked whether it's possible to add another trusted CA to support a different customer's 802.1X client authentication.Does an...
Dear community, Does cisco ISE Agentless service utilize user AuthC or machine AuthC? I am asking this due to the fact that I have a Usecase were only machine AuthC is being used, thus wiling to know if I will be able to use Agentless posture in thi...
Hi guys, I'm currently configuring TACACS with ISE and running some integration tests. How do you handle switch access using local credentials? The switch rejects the local credentials as long as ISE is up. In the authentication configuration, I spec...
Resolved! ISE reimage using CISM
Hi All , We have SNS-3755-K9 in the production network.After installing it we have noticed that live logs of TACACS are not showing on the web portal. what is the best way to re-image the ISE ? As per Cisco TAC re-iamge should be done to fix the issu...
Hi! While i am aware that SNS 3615 can still support ISE 3.4, I am kind of anxious whether the appliance's resources can. Say for example the storage, memory. I cannot find any public document stating the hardware specs required for the upgrade. Or I...
Resolved! Pushing object groups dACLs through ISE
Hey all, Is it possible to push dACLs containing object groups to the switch? Do I need to configure the object groups locally on the switch or can it be pushed too? My main goal is to minimize the amount of ACEs, in order to do so I want to group a ...
Resolved! PAP Authentication Protocol
Dears, when I do ssh to switches the authentication protocol and in authentication details in the attached snapshot I see the protocol as a PAP_ASCII which is been used. As I know the PAP is clear text password authentication protocol, so how I can ...
Am having a persistent Anyconnect vpn disconnection with the an error relating to MTU. It has been working well until I started getting continuous disconnection after a minute or less. At first I though to be related to network stability from the c...
We have a customer who wants laptops to only connect to the corporate Wi-Fi. If the corporate SSID is in range.This worked well with Cisco AnyConnect NAM, but now they need to use the native Windows supplicant..Is there a way to do this without NAM? ...
Hello Team,We have integrated Aruba-CX switches with Cisco ISE for Endpoint profiling. Cisco ISE is configured to use FQDN and other attributes to identify and profile endpoints such as printers, IP phones, etc.However, we've observed that the FQDN a...
Hi guys,I´m using ISE version 3.1 with Aruba Access Point.From RADIUS Accounting Report, there are information about START and STOP, but I CANNOT SEE Account Status Type equal INTERIM-UPDATE.Analyzing the absence of interim-update logs of the radius ...
Resolved! ISE Dot 1 X Authentication
Hi, I would need some help here. We have an Internal PKI Server integrated with AD and ISE as the AAA server authenticating users and devices. All domain users and machines are automatically placed on internal VLAN upon the dot1x EAP authentication. ...
