Network Access Control

ISE SMTP authentication

I am trying to use ISE to send mail to the guest users with their credentials , the problem is ISE didn't use any authentication to use mail account also we can't change the SMTP port on it to allow authentication bypass on SMTP server.can we request...

Cisco ISE TACACS supported device list

Hello, I have a case where customer wants to use tacacs to ISE. The device they want to configure with tacacs are PA, mikrotik, F5, riverbed, wlc, switch, router, cisco collab, cisco prime, solarwind, netscout vss, trueview, vfs, esxi, metsploit. ...

Resolved! Can i create more than 100 NDGs?

Hello,Can i create more than 100 NDGs? I saw the limitation on the following link: ISE Performance & ScaleMy customer has around 200 sites and he wants to create one group per site.I have created more than 200 NDGs on a test platfom without any e...

Resolved! ISE Guest Account expiration with Hotspot

How can I configure the guest users using hotspot access with AUP accept only so that their accounts expire after 12 hours and after expiration they will be presented with the AUP portal again for having access granted?Right now it seems like once th...

Resolved! Access rights on TACACS+ on ISE based on specific products

Team,My customer has 2 times, one for networking handling routing, switching and so on and another team which is security team that handles the firewalls.The customer wants to provide a kind of role based access meaning they want the security team to...

Attributes Library from other vendors

Hi all, Does anyone know if in the last release, ISE can load an attributes library from different vendors? if not, when it will be. One of the major handicaps against its competitors, like Clearpass, if the lack of compatibility with other vendors. ...

Resolved! Guest gain the internet access after approval

Is there any possibility that after Guest self-registration, he/she will gain the internet access upon approval without login.

Resolved! How to fix the error "Get flow failed java.lang.NullPointerException".

How to fix the error "Get flow failed java.lang.NullPointerException". Before I got this error I try to customize guest portal with html and javascript and it work fine but after that when i click to edit guest portal it has to get flow to show on we...

Managing SSH Public keys on IOS devices

I've been experimenting with SSH public key authentication into my Cisco devices. I've got a basic setup working fine, but my concern is key management. At the moment all I can see is how to define the keys locally. Once you start to scale beyond a c...

Resolved! ISE Scale

Is it standard practise to have the bigger SNS-3595s as the PAN/MnT and the smaller SNS-3515s as the PSNs in a distributed deployment. I am 95% sure it is, but want to make sure.

Resolved! Recommendation for Dedicated Storage

Hi team,In the installation guide for ISE the following line is found:"It is highly recommended that VM resources be dedicated and not shared or oversubscribed across multiple VMs. Deploying Cisco ISE virtual appliances using the OVF templates will e...

Resolved! Permitted values for cisco-av-pair=cts:security-group-tag ?

What are the permitted values for the SGT when populating the RADIUS attribute cisco-av-pair=cts:security-group-tag? I've seen some examples (in various PPTs) where SGT=5 was expressed as "0005-01" or are "0005"? Is this a string or a hyphen-separate...

ISE guest authentication portal behind reverse proxy

Hello to everyone. I'm struggling with some problem:Some time ago I deployed Cisco ISE mainly as a method for authenticating company gust computers so ISE was placed in isolated DMZ, behind a firewall. Requirements changed and now i have to authentic...