Network Access Control

Hello, I have an ISE full distributed deployment 2.0.1.130. All the nodes properly enrolled with MS AD and when I run the diagnostic tool all the tests are successful except one warning for the test "DNS SRV record query". The result and remedy speci...

We have an unusual situation whereby we are supplying LAN as a managed service but will allow clients to control port security via 802.1X Although I can get this working fine, we're concerned that there's nothing stopping the client changing the por...

Hello,I have question regarding Alarm: Misconfigured Network Device Detected -. Reason:NAS sends RADIUS accounting update messages too frequently Do anyone know what is the threshold for this alert to be triggered? And if it's hardcoded (I'm suspecti...

I know this is primarily a Cisco forum but since ISE is multi-vendor capable, I was wondering why none of the non-Cisco Device Profiles have any CoA radius attribute configs, apart from the Disconnect option? Does anyone have any real-world CoA attr...

Hi,I've a strange problem regarding two different deployments of ISE 2.1. The first deployement is a fresh ISE 2.1 install with patch 3, and the second deployment has been upgraded from ISE 1.3 patch 7 to ISE 2.1 patch 3.The fresh deployement has the...

Team,Cisco ACS 5.8 supports IPv6 addresses in TACACS+ protocols. This is for device administration. Does ISE 2.2 support this? Or do we have a road-map for this? Some large customers are asking. Thank you in advance.-Moniza.

Dear Colleagues,The customer would like to log the MAC addresses of the endpoints connecting over VPN into their SIEM.As far as I know we can't do that. Seemingly we can't even send the MAC to ISE from ASA over the MDM-tlv attributes.Is there any tri...

Hi team,How to get access to ISE 2.3 beta ?thanksChristophe

Hey guys, I'm using the 'One Click Approval' feature for guests (very cool feature by the way). This allows anyone in the company (with an AD account) to approve guests that nominate them as their sponsor. However, once a sponsor approves an account,...

Hello,I am trying to quey MAC addresses from an external source which is an Oracle DB. There is a connection problem and ISE is not able to access to the DB. Here are the parameters I entered on ODBC connection page:DB host and port: exa01-vip:1264 (...

This is a weird one. But concerns me because I am migrating a customer's ACS 5.2 to ISE 2.2 and in one of their ACS Policy Results they include a VSA called MS-Tunnel-Tag inside the Microsoft VSA dictionary.  Customer performs a lot of dynamic VLAN a...