There is a simple guide to integrate ISE with CTA when using WSA, but it is dependent on logging into a CTA cloud account. This account does not seem to be present when using CTA with SW.How do I set CTA endpoint flags in ISE when using SW?
Can someone tell me the SKU's, for a design BOM, that I need to migrate an existing SNS-3415 from ACS to ISE? The ISE Ordering Guide, section 3.2, Migration Ordering Information, says to use SNS-3515-K9 with SW-3515-M-ISE-K9 but this seems more like...
Hi,Could you please confirm if ISE can support integration of Nexus Hybrid gateway product as PKI solution?Thanks,Vaishnavi
I have a customer who has a wildcard certificate. Let's says it's:*.bar.comThey have ISE implemented in multiple SubDomains so lets say they have:ise1.foo.bar.comWould *.bar.com match on hosts in the foo.bar.com subdomain? I've looked all over the pl...
Hi team,Need some clarification on ISE VM resource reservation. There seems to be two ways to reserve it, one is using the slider under the VM properties next to "Reservation" and the other is either setting CPU affinity under Advance CPU or "Reserve...
Hello Team,I am working with customer who want to use 167 Conditions with OR in one Compound conditions.Is there any max number on conditions which can be used ?Also I am not sure if this will make performance issue.Is there any recommended max numbe...
Hello, For sure I am blind but I am unable to find this option for Authorization profiles in ISE 2.3, by default it use First Matched Rule Applies, but I am do not find how to change to Multiple Matched Rule Applies in this version. I need to use...
Hello, Our organization is looking to move from an existing CA which is pushing to computer certs to a new CA. Since ISE can only trust one CA at a time, we want to push out new certs to all the machines from the new CA for several days and then m...
Hi, Posture assessment fails because Cisco Anyconnect is not recognizing the installed AV, but it only see the Windows Defender installed. The problem is, since the user has McAfee, it automatically disabled the Windows Defender and therefore no up...
Customer would like to migrate from ACS5.6 to ISE2.x. Customer ACS deployment is with an SNS-3415 appliance. Request is to upgrade to ISE2.x but maintaining the SNS-3415. Is this supported? If yes, what licensing migration SKU can I use? If no, ...
We have some Extreme switches in our environment and we use Tacacs to authenticate admin access to those switches. We are phasing out the Tacacs and we are trying to replace the switches as fast as we can. For the time being the tacacs will be gone...
Hi Team,As of now our TC-NAC integration guides mention that we need to run the initial authorization and trigger a threat scan which will then hit an exception/authorization based on results returned by Qualys/Tenable. The returned results are stor...
I am looking at upgrading a 5 node 2.1.0.474 deployment. When I select Upgrade I get the following error about patch versions. Patch 2 is installed on all nodes. Patch 1 in installed on 4 of the 5 nodes. We had to rebuild one of the nodes and during ...
Hi Expertz, I have my ISE and windows 7 endpoint deployed in the same ESXI server, and both are connected to a same switch in the same subnet. The Server connects to switch ports (g1/0/10 and g1/0/11). So now, Which switch port should i configure dot...
Two node setup. Moved from ISE 2.1 to 2.2. Upgraded secondary node. Primary node failed to expired certificate. Rollback failed. Had to delete node and create new node. Synced new node with original secondary. Made new node primary. Now not g...
