Network Access Control

An airport plans to use ISE Hotspot Guest Portal for the passengers. To avoid, that the wifi bocomes overcrowded by thousands of airport employees, they want to define some rules like:- If an endpoint has been online >12 hours during the last 7 days,...

Hi, Looking at the overall rollout of ISE across our organization.  As I understand it we start in monitor only mode (current) and from there we roll it out to wired first and the wireless afterwards (per Cisco use case). I'm trying to figure out wh...

Hello community,I am testing out ISE 2.1 REST API.I managed to create a new ANC policy and want to apply it to an endpoint.When I PUT https://IP:9060/ers/config/ancendpoint/applyI receive 400 bad request:        <message type="ERROR" code="Applicatio...

Hi,I have a customer looking into the possibility to do MAB with MS-SQL. I was wondering if we have any recommendations/requirements regarding the SQL DB setup. The documentation I found only stated SQL 2008 R2. I am looking for size or scale informa...

Hello,On ACS, we are able to get a VLAN ID configured on LDAP and use it in authorization response,It seems that's not possible with ISE, right ?Kind regards,Pascal

Would like clarification on this from the Admin Guide:Cisco Identity Services Engine Administrator Guide, Release 2.1 - Manage Users and External Identity Sources [Cisco Ide…Cisco ISE always uses the primary LDAP server to obtain groups and attribute...

What is the preferred method for admin certificates in a multi-node deployment:1) Single cert with multiple SAN for each node2) Shared certificate with multiple SAN among all nodesShould I create different cert for each node or just share a single ce...

I have a customer that has an SSID configured for MAC filtering pointing at ACS 4.2.  The MAC addresses are objects in AD.  The MAC addresses are entered into AD in the format of "fcc2de8195a3",  If I configure a policy set in ISE for this SSID to go...