Network Access Control

All,The attached picture is of an endpoint in my customer's system.  You can see that the endpoint has been in there for 600+ days but the inactive days is 0.  There is no selected authorization profile so most likely this device has never authentica...

Hello,Trying to get Guest/CPP redirection working on a 3850 running 03.07.05.E. My .1x client VLAN is using a VRF and I can access the URL if I manually enter the redirect URL, I just cant get it to automatically redirect. I came across this from a p...

What are the parameters other than CPU, Memory and Storage that should be monitored on Cisco ISE in order to do capacity planning effectively. Currently ISe 3395 with version 1.4 is active in the production environment in distributed deployment mode.

Hi all,my customer is looking for a way to export all within ISE configured dACLs to hand them off to for example a security auditor for review.Could not find anything in API or on the GUI to do this tak. Am I missing something?Thanks in advance.Rola...

Hi Team, According to the doc, operation "Delete" can be used with Bulk method even with JSON or XML (ISE 2.2) for Endpoints` management. Can you please confirm it?Since URL (https://ise/ers/config/endpoint/{id})  contains the ID of the Endpoint,coul...

Anyone out there experienced with using ISE as an Intermediate CA for BYOD?When using ISE as an intermediate CA we seem to get odd results in the windows client certificate issued by the BYOD process. We have observed the same in ISE 1.3 and 2.0 patc...

Is it possible to integrate ISE with Meraki MR for wireless guest access using SMS as a method to deliver user credentials? Anyone tested this before? What are the gotchas and best practices?

Hello Team,Are there any plans to allow support-bundle retrieval via API (and choose the node) ?I would like to analyze (and automate) support bundles digestion (via BDB) and have no SSH access, just GUI to PAN (and ERS API user).Thanks,Michal

Hello, I am tinkering around with a two year old SNS-3415 appliance at my workplace; as we prepare to replace it with its predecessor - The SNS-3515. However, when I logged into it, I could only execute BASH commands; no ios commands. I's it possible...

I have a customer asking if we still use Multicast for PSN. I have looked at different documents, and it looks so, but somehow I also have a vague memory of a change removing the need for Multicast, but I might be wrong.I cannot find anything about i...

hi,Our customer wants to protect against WannaCry using posture.Can we check the presence of specific Microsoft KBs using ISE posture with ISE 1.3?The predefined posture conditions (i.e. pr_Win7_64_Hotfixes) contain a number of combined KB checks, bu...

We are using Onelogin Idp(Identity Provider) for Single Sign On(SSO) support from our UI.I can see ISE primarily  supports PingFederate Idp for SSO along with other Idp Providers from the ISE 2.1 Release notes.www.cisco.com/c/en/us/td/docs/security/i...

Hi,I have a few questions regarding AnyConnect software maintenance in ISE wired/wireless deployment. Could you please help me with the following:What is the recommended way to keep AnyConnect (NAM and ISE Posture modules in my case) up to date on en...