Network Access Control

Hi, I would like to implement Cisco Trustsec on Catalyst 6500 Series Supervisor Engine 2T to control access between the PCI system and non PCI system in the same subnet/VLAN. Question: Can you configure classfication/progatation/enforcement in a sing...

The firmware of the APs in the Meraki Dashboard claims to be "Up to date". I'm using ISE to authenticate Wireless 802.1x corporate users against the AD using PEAP-MSCHAPv2. Using the default Wireless 802.1x compund condition (which uses Radius:Servic...

If an endpoint is profiled as Unknown ISE tries to do an NMAP query. If an endpoint is still profiled as Unknown how frequently does ISE tries to query that endpoint again ?

Hello,i spent couple of days researching is it possible enterprise wireless security design with OTP. The idea is to authenticate first the machine and then the user with OTP. If both successful - access to be granted. As far as my research went - i ...

Customer has SNS-3515-ACS-K9 and wants to migrate to ISE. Appart from ISE licenses, what do we need to order to have this hardware ready for the ISE environment? The OG says:"ACS customers with supported hardware (SNS-34xx or SNS-35xx) who wish to mi...

Hello,I have a client who wants to deploy Cisco ISE with a self-registered portal requiring sponsor approval. They want the guests to have network access for configurable lengths of time. Is this possible? I found the following documentation stating ...

We want to setup ISE PSNs behind a loadbalancer( Netscaler or F5). For COA, do we need to add default route on PSNs towards loadbalancer IP? How should we route traffic from PSNs if we are using SNAT, i.e. default route should be towards ? If we are ...

Hello, I'm wondering about the following statement regarding the use of multiple NICs on a PSN (Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_011011.html Allowed interface...

hi everyone,can you please help me to clarify the situation with Device registration status on MyDevices portal?As per Craig's words some time ago, the BYOD registration will be set to “Yes” and Registration status will become “Registered” only when ...

HiFor compliance reasons I would like ISE to always send an email for EVERY new account that is created to a fixed recipient email address.And I don't want to rely on the Sponsor to have to click the Notify button to achieve that - I want ISE to auto...