Network Access Control

Dear Team,my customer, running ISE v2.2, asked if it is possible to run a report, which authentication and cypher protocols are used by how many clients.Background: We've disabled TLS 1.0 and SHA-1 in patch2, and so they want to to check how many cli...

Hi Team,Client is using Cisco ISE and a SAML Id Provider to authenticate users to a guest network. The vendor has requested a number of DNS names be allowed for the initial access and some wildcard names. So we have tried configuring the redirection-...

Dear colleague,I'd like to understand where can I find the documentation to configure ISE to work with VMware vSphere Distributed Switch (VDS).Is VMware vSphere Distributed Switch (VDS) compliant to standard RFC like 3580 (IEEE 802.1X Remote Authenti...

Release notes shows ISE2.1 supports "Allows the export of probe data from the GUI".https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/release_notes/ise21_rn.html#pgfId-697983On the lab verification, I got the export data from GUI. But I looked fo...

Hi,When doing BYOD onboarding on Android devices, normally, we need to download and install the Cisco Network Assistant APP online from Google Play store.I'd like to know if it's possible to pre-install the APP on the Android device, so there is no n...

HelloI have a bunch of F5 LTM load balancers that poll the PSN's on a frequent basis (typical health monitoring).  The LTM's just send a simple Radius authentication and they don't send an accompanying radius accounting.  I usually suppress the authe...

Running ISE 2.2 patch 1.  This a two part question:Where can we see exactly what ISE is scanning in the Unknown endpoint state.  I swear changes every version.  I thought it was OS and common ports but now I am seeing voice ports (TCP 1720- H.323 and...

Hi all,I wonder if anyone can help with a scaling question.We plan to deploy ISE in large scale mode with dedicated PAN, MnT and PSNs for a 20k endpoint solution. Initially I was planning to propose 6 ISE (3595 or VM equivalent) nodes in total, to pr...

I have been facing issue, where MAC OS machines connecting through external wired dongle are getting profiled as unknown. Has anyone found the way how to profile it as an apple device or MAC workstation.We are using MAB to authenticate those endpoint...

Hi team,as per our compatibility, we have limited ISE MDM support with Aruba 3200/7000 and IAP. Is that because Aruba does not support Radius CoA the way we need? Their docs (RADIUS Change of Authorization (CoA) ) have template for disable/bounce por...

Hi team, how are you doing?My customer recently deployed ISE 802.1x solution, but they are having a conflict between 802.1x authentication settings and the "port-security" on the Cisco IP Phone interfaces.When "port-security mac-address sticky" setti...