Hello,I have a question about Secure Boot and the Image Integrity Check features that were introduced in 2.0.1. The release notes for 2.0.1 clearly say that both Secure Boot and the Image Integrity Check features are only available on the physical ap...
During a PoC with a HE customer. To make password generation easier for guest self-registration. They selected upper and lower case letters and numbers for the password policy. But they want if the guest wants to use a special character to allow f...
When exactly does a Plus License get used? I have profiled Cisco Phones that Authenticate via MAB and then pass the following authorisation policy -"If Device is in Endpoint Identity Group / Profiled / Cisco IP Phones then allow access to voice doma...
Hello,We want to create a diffrent posturing policy for our laptops and for our desktop.Is there a way to achive it with ISE? Thanks,Omer Shtivi
In this link, ISE 2.3 support both H3C (OS 5.20.99) and Brocade ICX 6610 (OS 8.0.20) https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/compatibility/ise_sdt.html Q1) Please clarify if the following H3C and Brocade switches are supported by ISE 2...
I am having trouble importing devices from ACS 5.x. I exported from ACS to a CSV and when I try to import I get the follwojg message: Header Name:String(32):Required is missing. The CSV was autogenerated by ACS and it does have that field listed ...
When trying to quarantine via the GUI using quarantine by ip address, the operation fails. It appears there is an extra character at the end of the mac address that causes it to fail. If I remove the character and enter it in via the CLI, the opera...
Dear Team, We have deployed a wired ISE project at one of our biggest customer infrastructure, and the good news the ISE part is perfect, and all scenarios for dot1x and MAB have been tested and deployed successfully, however as the customer is havin...
ACS/IBNS Teams,Customer is saying they cannot get mab working on a 3750 but the same host works on a 3560 if moved. Basically, it shows Authc successful but the port state still shows as unauthorized. I have attached the logs. Any ideas? My next step...
Hi Team,My Customer is asking the following use-case based on AD group and passive ID:Deny policy for the PC without Domain.Permit policy for Domain User and Computer.My understanding is that we don't support the Domain Computers in PassiveID... is t...
the scaling numbers for 3415 are 5k when PAN and MNT are colocated on the same server. Does this still apply if PAN/MNT are split off into two separate servers? Have a customer doing this and consistently hits 14k active endpoints with no correspon...
Hi everyoneI have a client ask me to configure Cisco ISE work as below :They use switch Cisco 2960. But i wonder :- Does the system include Cisco ISE and Cisco switch 2960 meet this requirements.- Which attribute of ISE Authentication Rules help dete...
Hello All, Cisco ISE: v2.0.0.306 On the Cisco ISE Homepage under the Alerts section, it's showing an alarm for configuration changed. Now, tyesterday I cleared this alarm which said something along the lines of 300+ configuration changed alarms... Th...
What is the recommended way to integrate ISE with both an local Active Directory and Azure AD? In my case, we already run 802.1x with ISE integrated in an AD. Now we want to add an Azure AD with the same purpose. I am looking for Best Practice recomm...
I have a customer who currently uses ACS for TACACS and is moving to ISE. They use the "Enable Passcode Caching" feature in ACS to make RSA login sessions last longer. I see an "Enable Identity Cache" in ISE, but it appears to have a different purp...
