Network Access Control

My customer have a ISE 2.2 deployment and have a test switch, what they are trying to do as you know is the continuous requests for TACACS+ access to the network from the various support and development teams. They currently use smart cards in the PC...

Cisco customer doesn't like the fact that security scanner receives a response from ACS showing the name and version: 443/tcp open     ssl/http syn-ack ttl 60 Cisco ACS httpd 5.8They believe this is a security issue and are asking to remove this info...

I have some Licensing issues with Cisco ISE (Base license). With Base License I will be able to provide Guest/TrustSec/AAA/Radius dot1x. 1.) On my Cisco ISE  I need to purge Endpoints immediately. But unfortunately I get an error: "HTTP Status 401 - ...

Hello, I have an ISE full distributed deployment 2.0.1.130. All the nodes properly enrolled with MS AD and when I run the diagnostic tool all the tests are successful except one warning for the test "DNS SRV record query". The result and remedy speci...

We have an unusual situation whereby we are supplying LAN as a managed service but will allow clients to control port security via 802.1X Although I can get this working fine, we're concerned that there's nothing stopping the client changing the por...

Hello,I have question regarding Alarm: Misconfigured Network Device Detected -. Reason:NAS sends RADIUS accounting update messages too frequently Do anyone know what is the threshold for this alert to be triggered? And if it's hardcoded (I'm suspecti...

I know this is primarily a Cisco forum but since ISE is multi-vendor capable, I was wondering why none of the non-Cisco Device Profiles have any CoA radius attribute configs, apart from the Disconnect option? Does anyone have any real-world CoA attr...

Hi,I've a strange problem regarding two different deployments of ISE 2.1. The first deployement is a fresh ISE 2.1 install with patch 3, and the second deployment has been upgraded from ISE 1.3 patch 7 to ISE 2.1 patch 3.The fresh deployement has the...

Team,Cisco ACS 5.8 supports IPv6 addresses in TACACS+ protocols. This is for device administration. Does ISE 2.2 support this? Or do we have a road-map for this? Some large customers are asking. Thank you in advance.-Moniza.

Dear Colleagues,The customer would like to log the MAC addresses of the endpoints connecting over VPN into their SIEM.As far as I know we can't do that. Seemingly we can't even send the MAC to ISE from ASA over the MDM-tlv attributes.Is there any tri...