Network Access Control

Hi all, I am working on a POV where I need to create an authorization rule that is the following:If “NameOfTheLocation” contains “AD Group that the user belongs” (string comparison) then AccessWhich gives the following: But I realized it does not wor...

Hi Team,I read ISE-PIC FAQ and I see it supports maximum of 100 domain controllers. But does it support more than 1 AD domain ? If yes, what is the maximum ?Thanks a lotFabio

Hello Everybody;i have cisco ise 2.1 and cisco 2504 wlc (8.2.141 ver) on my environmentwhen i connect the ssid for the first time , i am redirected to CWA page. however when i close the browser , reopen it and try to open any page the redirection fai...

Hi Expert, I am running a ISE POC with customer doing guest portal and sponsor portal. The guest flow and sponsor approval flow as below. (1) guest get redirect to self-registration portal and key in his info plus the email address of the sponsor (2)...

We configuring ISE for MAB authentication using an external MAC Address database that contains a list of MAC Addresses and Endpoint Type (for example Printer, Workstation, HVAC, VOICE). We have created a custom attribute called "CompanyInfo" of the t...

Hello,I fully understand how ISE interface alias works for Portal services on non-Eth0. My question is regarding EAP Cert using Public CA. I will use the following scenario:ISE hostname = ise1.company.localEAP SAN = ise1-aaa.company.comInterface = Et...

I have implemented ISE in standalone role and also have Plus license. Now I want to create Cisco ISE node as a secondary node. Should I buy a new VM again to deploy secondary node? And as I understood I don't have to buy another Plus license for seco...

Hello Everybodywe use cisco ise 2.3 we have wildcart certificate *.cisco.com and i want to use in this way iseportal.cisco.com for portal(CWA)how can i use this  public certthank you

Customer was on ACS 5.3 (VM) with SAS and ordered CSACS-5.8SW-SR-K9= to migrate to ACS 5.8.After migrating to ACS 5.8, the SAS service has expired and wishes to renew SmartNet.What service should they order?Do they renew with CON-SSSAS-CSACS589 from ...

If I have ACS 5.5 running on SNS-3415, is it possible to back it up and restore it on an ACS instance running on VMware?Thanks,-Dan

Hey All,I wanted to get some feedback on what's beginning to be a more common scenario, especially with the new release of MacBooks requiring the use of dongles exclusively for wired networks. Consider this scenario:New MacBook with only Wifi registe...

I hear from my customer, global Pharma company that new laws are coming in January 2017 that require all guest wireless access to be authorised.They intend to use ISE with APs that are FlexConnect and Mobility Express controlled.  They have ISE 2.1 a...

We have a strange behavior when displaying an endpoint in the Live Log compared to the Context Visibility > Endpoints.In the Live Log, it is displayed when the Endpoint connects (looking up with the Endpoint ID), that the Endpoint comes from Switch-L...