Network Access Control

Hello, A client has ISE1.2 and the licenses will be expired next week. They are not ready to upgrade v1.2 to the v2.1 before the license expiration. The question is, can the new Plus and APEX license be applied on ISE v1.2?

Hi,what is the best way to make sure if ISE01 fails guest traffic for the portal will go to ISE02 automatically and without a load balancer?Thanks,

Hi,This may seem like a dumb question but I haven't been able to locate anything which gives me a simple answer. We want to do a simple Airwatch integration whereby if a device is not compliant it cannot join the SSID. What ISE licensing is required ...

Hello team,In an ISE 2.1 PoV with CWA auth for Apple iPhone, we're experiencing that there won't be a web portal showing up when 4G is enabled at the same time on iPhone. But the CWA web portal would show up if 4G is disabled on iPhone.We did the sam...

Hello all,One of my customer wants to integrate ISE with a Fortinet proxy so that when a user (already authenticated on ISE) wants to navigate on internet the proxy does not prompt for user's credentials. My understanding is ISE should send authoriza...

Hello Everyone,Spun up a new ISE 2.2 environment and upgrade it to 2.3.Completed a Wildsans (per cisco instructions here https://communities.cisco.com/docs/DOC-68164) and received our certificate back from our provider. Regardless of what we have tri...

Hi Team,We are no full support for passive authentication with easy connect, can we do posturing also without restricting to any 3rd party devices.Customer don't want to use 802.1x authentications.Please suggest.RegardsAnjan

Hi,can i use ISE as a TACACS+ server for login to Cisco Prime Infra 3.0?

Hello teamPlease can someone help in this issue?We have a customer who has deployed a Microsoft Azure NPS server for MFA. The NPS server is configured as a RADIUS Token server. It works so far, but ISE doesn’t send any AV pair attributes with the req...

Do the Nexus 9000s running in NX-OS mode support Trustsec?

I have a customer that is looking to populate NAD via API (mainly to keep in sync 2 standalone and independent deployments).What would be the scalability of the API? They have about 2000 devices, and looking to possibly have an API syncup once a day....

I am trying to create a profile rule so separate shop floor computers from office computers. They are in different AD groups by host name but I don't have the MAC in AD. Is there a way to profile them using an AD group without the MAC address?