Network Access Control

Hi, I have been upgrading ISE from version 3.1 to 3.3. I used split upgrade upgrading secondary first and then secondary via GUI. Secondary upgrades with no issue but primary fails. I tried to do it again from the CLI but I am getting an error % Erro...

Have a customer deploying ISE for wireless authentication using PEAP-MSCHAPv2.  They've encountered an issue where some users with long usernames are failing authentication to ISE.  ISE logs that the user is not found in the user database (Active Dir...

Hi all;As you know, there are three places which we can configure CoA operation related to Profiling operation in Cisco ISE. I want to know that, between Profiling Policy CoA Type and Exception Action Force CoA, which one is preferred? For example, i...

When ISE 3.2 Patch 7 is going to release?

Wondering if anyone has seen this issue before. Laptop on WiFi>Firepower(7.2.5) RA VPN>ISE(3.3 with posturing)Laptop will connect to VPN, issue happens on AC 4.10 and Secure Client 5.1.5.65.  Once posture starts to run, at 10% mark, it will say compl...

Hi all;Is there a way to find out when the Posture Lease of an endpoint expires?Thanks

Hello,   we want to create an defined Username for our known Guest Accounts in Sponsor Portal. The requirements are: First 3 characters should be an Location abreviation + 3 digits of the room. For example "abc123"   The only option that we found is ...

Running ISE 3.2 Patch 6 I am trying to retrieve the current endpoint status if it is online, and what the current IP address is.When I query ERS via /ers/config/endpoint/... with the GUID of the endpoint I don't see any IP address values.When I query...

I have a 9300 switch running Version 17.09.03, I have a Cisco IP Phone 7821 connected to a switch and a computer connected to the phone. I'm running IBNS 2.0 with dot1x and mab running at the same time. I'm encountering a weird issue because when I p...

I do have a TAC case open about this, but after 3 days they have been unable to provide a solution. So looking here now too.We have multiple Polocy Sets for both wired and wireless using dot1x and MAB. All are working great. We also have a Guest + Em...

We have recently upgraded our distributed ISE deployment from 3.2 to 3.3-patch3. After that, we have disabled the weak TLS/SSL ciphers and restarted the services. After that, all the PAN , MNT and PSN nodes in the deployment got remediated except one...