I've read that ISE REST API uses TLS (https) over port 9060 with basic authentication. Is there any additional encryption being done for the username and/or password other than sending the data thru the TLS tunnel? e.g. password encrypted with public...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Hi All I found the acl not work before my device during running auth below is the ACL interface command AAA command Would you have any suggest for me? Thanks!
Resolved! ACS and DNAC integration
Hi,Is there any documentation for ACS and DNAC integrationThanks
Resolved! Time-based Radius CoA dynamic trigger
Hi,How do I achieve the below use cases with ISE and Wireless?Only allow access to the network from 9am – 6pm, and disconnect any “active” clients after 6pm?Assign a Radius av-pair AIrespace-QoS-Level to clients who authenticate from 9am-6pm, but ass...
Hi All, Can we perform mac based authentication on ISE ? I am doing the same on WLC but have reached the maximum limit. Is there a way to do the same on ISE 2.3 ? If Yes, then how ?
To support wired/wireless BYOD for Windows and Macs, are admin rights needed for the logged in user on the local machine to accept the configuration changes in the wired/wireless profiles distributed by Native Supplicant Profile? I've looked in ISE ...
Resolved! MAC computer as a AD domain machine
Hi Team,Customer would like to know a MAC computer is an AD domain machine or not. And define different policy based on it. How can we do it in ISE? We found MAC did not send host authentication in ISE live log. And no register table to check it’s do...
Resolved! Cisco ISE integration with Aruba WLC
Dear ISE Team,I doing ISE PoV to my customer. My customer have Aruba WLC. I using virtual WLC Aruba to simulate my customer environtment. I try to do integration between Aruba WLC and Cisco ISE, but i can't find example configuration or documentation...
Hello guys, I am fairly new to Posture and I have hence a couple questions : I have read that the only way to implement Posture has to be done with AnyConnect (since NAC Agent is no longer supported). Is there any way to deploy it without it VPN fe...
I have a customer who has a concern :How do we get the static IP-SGT mappings defined in ISE to propagate to the VLAN-level on the Nexus 7K's?? This needs to be automated in a similar manner like it propagates to the default VRF on the Nexus 7K's.Tro...
Resolved! Splunk permission for ANC using pxGrid
Hi,We have two users in Splunk, one Admin, one Power User. The Admin can quarantine endpoints using pxGrid workflow actions but the Power User gets an authorisation error that appears to refer to a passwords file. External search command 'pxgremediat...
Resolved! Wired ISE question
I have a rule in wired MAB called VOIP Phones. I am trying to determine how the phone is getting authorized inthe switchport configuration is below:interface GigabitEthernet0/13 description Dan's Desk1 switchport access vlan 102 switchport mode acces...
Hi All,We have a customer requirement where they have VDI as well as laptop users who connect to random ports. Please advise what is the best way to securely deploy ISE in such an environment. I was thinking of having MAB for VDI and dot1X for laptop...
Locked user was failed in Authentication From ISE 2.3 also After unlocked this user form AD still Failed in authentication, need to make the user success in authentication Automatically after being unlocked without restart the PC or disable and Enabl...
Resolved! licensing
Hi, Can you get a BASE license for all devices and for a subset of devices BASE + PLUS licenses, for specific functionalities (e.g. PKI or profiling)Thanks
