Network Access Control

ISE experts,My customer has the following AuthZ rule in ISE:If Cisco-VPN3000:CVPN3000/ASA/PIX7.x-Tunnel-Group-Name=internal + authentication is EAP-TLS, then permit.  If an employee uses AnyConnect with their personal device without a valid client c...

Hi folks,Just found something strange. we have distributed deployment: PAN and secondary PAN, and some PSNs.we disabled internal CA service from PAN's GUI,  but we noticed only 2nd PAN still has CA and EST running, the others all disabled.Is this nor...

All, I have two ISE servers with one base model license. I understand when using them as failover the license will transfer so no need to purchase two set of licenses. Is this the same case when you have a primary administration server and policy no...

Hi everyone, We are working on a customer  who have developed their own app for BYOD and guest access.  They are currently using Clearpass to provide their authentication and using an SQL database.   The historical reason they went for Clearpass a co...

Hi Team,We have a issue wherein the ISE is not able to check the compliance status of Symantec EP v14.x, on research we have found the bug as below:https://bst.cloudapps.cisco.com/bugsearch/bug/CSCve94761/?reffering_site=dumpcrDo we have any workarou...

I am in the process of testing out TrustSec and have a couple questions.When I bring up a CTS session w/ PAC on an ASA to ISE,it seems that the ASA gets the environment data but only has a list of the IP:SGT tags it is directly responsible for. It ap...

We would like to automate maintenance commands (specifically the backup since the GUI-base backup scheduler doesn't work for us). Does the API have a PUT/POST to the command line interface?Thanks.

HI there!  Im looking for some information that im having trouble finding.  Ive seen discussions on fast switching but it was unsupported with windows 7...im wondering if:- Do we have any information on how Windows 10 Fast Switching works with ISE as...

Hello,I have just upgraded my 2.1 ISE distributed deployment to 2.2.  After the 2.2 upgrade (I have not installed patch 2 yet as it was just released), my compliance checks are failing for both mac and windows.  These were working perfectly fine unde...