Hello,We want to create a diffrent posturing policy for our laptops and for our desktop.Is there a way to achive it with ISE? Thanks,Omer Shtivi
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other troubleshooting best practices.
Forum Posts
Resolved! ISE Compatibility
In this link, ISE 2.3 support both H3C (OS 5.20.99) and Brocade ICX 6610 (OS 8.0.20) https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/compatibility/ise_sdt.html Q1) Please clarify if the following H3C and Brocade switches are supported by ISE 2...
I am having trouble importing devices from ACS 5.x. I exported from ACS to a CSV and when I try to import I get the follwojg message: Header Name:String(32):Required is missing. The CSV was autogenerated by ACS and it does have that field listed ...
Resolved! ISE 2.3 - Splunk RTC Operation Failing
When trying to quarantine via the GUI using quarantine by ip address, the operation fails. It appears there is an extra character at the end of the mac address that causes it to fail. If I remove the character and enter it in via the CLI, the opera...
Dear Team, We have deployed a wired ISE project at one of our biggest customer infrastructure, and the good news the ISE part is perfect, and all scenarios for dot1x and MAB have been tested and deployed successfully, however as the customer is havin...
ACS/IBNS Teams,Customer is saying they cannot get mab working on a 3750 but the same host works on a 3560 if moved. Basically, it shows Authc successful but the port state still shows as unauthorized. I have attached the logs. Any ideas? My next step...
Resolved! ISE 2.3 || ISE-PIC with Domain Computers
Hi Team,My Customer is asking the following use-case based on AD group and passive ID:Deny policy for the PC without Domain.Permit policy for Domain User and Computer.My understanding is that we don't support the Domain Computers in PassiveID... is t...
Resolved! SNS-3415 Scale
the scaling numbers for 3415 are 5k when PAN and MNT are colocated on the same server. Does this still apply if PAN/MNT are split off into two separate servers? Have a customer doing this and consistently hits 14k active endpoints with no correspon...
Hi everyoneI have a client ask me to configure Cisco ISE work as below :They use switch Cisco 2960. But i wonder :- Does the system include Cisco ISE and Cisco switch 2960 meet this requirements.- Which attribute of ISE Authentication Rules help dete...
Resolved! Cisco ISE - Configuration Changed Alarm
Hello All, Cisco ISE: v2.0.0.306 On the Cisco ISE Homepage under the Alerts section, it's showing an alarm for configuration changed. Now, tyesterday I cleared this alarm which said something along the lines of 300+ configuration changed alarms... Th...
What is the recommended way to integrate ISE with both an local Active Directory and Azure AD? In my case, we already run 802.1x with ISE integrated in an AD. Now we want to add an Azure AD with the same purpose. I am looking for Best Practice recomm...
Resolved! ACS to ISE: Enable Passcode Caching
I have a customer who currently uses ACS for TACACS and is moving to ISE. They use the "Enable Passcode Caching" feature in ACS to make RSA login sessions last longer. I see an "Enable Identity Cache" in ISE, but it appears to have a different purp...
Hi All, I am confused about NAC and 802.1x. What NAC is doing, what dot1x is doing. How they are related to each other. Totally confuded. Please shed some light
Resolved! EOS of SW-3595-M-ISE-K9?
When will be the last date that SW-3595-M-ISE-K9 can be ordered ? Does it vary by region？
Resolved! Cisco ISE disk encryption posture status
Dears, we have ise 2.1 installed, i was trying to check the posture status of disk encryption feature. we have Symantec Desktop installed and disks encrypted. after the configuration is completely done. the posture status result is the the software ...
