HiSmart Licensing is cool and we're busy converting all of our traditional licenses to Smart. We're also using Smart on Cisco Prime. The challenge I am having is that in my environment, all internet traffic needs to go via an internal Proxy. The pr...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Resolved! OUI "Unknown" in EndPoint Profile ISE
Hello all,we have several ISE 2.0.1.130 authenticating clients from 2 Cisco Anchor Controllers. We have noticed lots of clients are showed as "Unknown" in the ISE Endpoint Profile OUI field.We have enabled ISE Feed Services and we have checked it is ...
Hello Everyone,I am trying to upgrade an ISE standalone box from 1.2 to 1.4 but found few isuses.Looking for your expert advice.Issues encountered:1) Sponsor Groups : Few sponsor groups which were available in 1.2 are missing after upgrade to 1.4. I...
When the policy assign a vlan, How to have the device fast to get a IP address. Because it need around 3~5 mins to assign IP address. Would you have any suggest for me?
Resolved! Cisco ISE deployment licences
Hello guys, Q. Do I need to purchase licenses for every node in a Cisco ISE cluster or deployment? A. No. Cisco ISE license files are uploaded to the primary Administrative node, and the node propagates the licenses to all the nodes in the cluster...
Resolved! ISE integration with Cisco Prime 4.3
Hi,I need your help. Customer wants to integrate ISE 2.1 with Cisco Prime 4.3. What information do I need from them and what do I need to do in the ISE console?. Also I have the following questions from customer:For ISE NBI integration with Cisco Pri...
I have configured a Win2k16 server with NPS to authenticate admin access to a pair of ASA 5516Xs. My configuration works fine for ssh access to the ASA but when I attempt to access the ASA with ASDM, authentication fails. aaa-server RADIUS_GROUP pr...
Hi - I am currently implementing AAA server (ISE) in our infra and i would like to configure in such a way that; line vty aaa can be done via tacacs server. But the console access will be only to local authentication. Please let me know the best wa...
Resolved! ISE 2.X and PCI Compliance
Is there a more recent version of the document below? This version maps ISE 1.2 to PCI 2.0. http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Compliance/Compliance_DG/PCI_Compliance_DG/ch4_PCI.htmlAny help would be appreciated.Thanks!Warren
Hi, This is what i got from ciso ise for dot1x authentication There have been 1 repeated authentications with the same authentication result. The authentication details of the first passed attempt is shown here. What does it mean Thanks
Resolved! ISE admin activity log
Can ISE log admin activity? Something like change log?For example a log like; admin-A edited rule X, bla bla...If yes, can someone guide me how to do it? I couldn't find it on ISE dashboard.
My Customer is trying to enable Hyper-V on a Windows 10 workstation. We have a requirement for some of our call-center support staff that they need to troubleshoot varying workstation operating systems. So to accomplish this, we enable Hyper-V and ...
Resolved! ISE 2.2 SCCM remediation
Hi,We have implemented ISE 2.2 with latest patch.We would like to use client based (not MDM) SCCM posture with remediation.At our customer the Windows patch installation process is the following:When the patch arrive form MS, the IT assign this patch...
Dear,One of our client's is apparently hitting this Bug CSCvc17726 - ISE 2.1 Could not download Certificate Revocation List.They are running ISE 2.3, but in the Bug info there is only ISE 2.1 is published as an affected.Is the ISE 2.3 also affected a...
HI folks, it seems when using ISE for device administration / tacacs I do NOT have the ability to authenticate against a specific AD group but can only specify an external identity store such as the actual domain controller, For Authorization I can u...
