Network Access Control

Is ISE sizing the same for on prem and AWS deployments?The sizing guide seems to state ISE small, medium, and large sizes can be determined based on max # of concurrent sessions.  Where can I see the current concurrent session and historical concurre...

Hello Please guide me where to look since snmp communication is not working. 1. I checked if snmp is set in cli. snmp enable snmp-server community<KEY> enabled snmp-server host<IP> version 2c<KEY> 2. If you look at the logging, it's on the left. ...

Hi, Cisco promotes the Catalyst C1300 as the successor to the C1000, but it lacks key features like proper RADIUS-based Voice VLAN assignment and multi-domain authentication. This is misleading, as the C1300 cannot handle enterprise-level voice/data ...

We have SDA deployment with ISE. For authentication we use mainly MAB. Here is how ISE is configured:Mac addresses are (manually) added to Endpoint Identity GroupsPolicy sets include rules with conditions ‘IndentityGroup-Name EQUALS …’Policy set rule...

Hi all,  I have one isssue, when I using wired ISE will be check pocture if microsoft defander older than 1 days user will reach to qVlan. Qvlan should get the update for microsoft defander but no. can anyone advice?

Hi, There are two types of assignment of SGT : dynamic and static. Static assignment, ISE will use SXP to inform switch. How about dynamic (user use 801.x for auth)? Will ISE use SXP or not?  

Hello, One of our customers is having Avaya IP Phones with static IP. The customer has disabled LLDP in the switches due to audit requirements. What would be the best profiling probe method to use in such scenarios?.   Thanks Shabeeb  

Hi,Has anyone been able to successfully deploy ISE in Azure using expressroute from on-premise to the cloud.We have had ISE running in Azure for about 3-4 months now and have noticed a large amount of fragmentation using EAP-TLS. The Cisco guide sugg...

Hi,Is it possible to integrate Kandji MDM with Cisco ISE?I have been looking for guides but so far not found any.Our company uses Kandji MDM for the management of Apple devices and we want to integrate it with ISE to enforce NAC. I have just finished...

guys pls check the screenshot attached of an ISE patch condition (Win10-Patch Condition.jpg).Does it means ISE posture check whether Windows OS critical patches are up-to-date or BigFix client agent is up-to-date?   I had applied this patch condition...

Hello,is it possible to use two external identity sources one after the other?We do TACACS and RADIUS for admin access to network and security devices.In a first authentication step I need to ask AD because there is a MFA system connected to.But in a...

Hello Guys,  Being new to cisco ISE am trying to authenticate windows PC using DOT1X with following test cases:- 01. By using local PC Windows11 login credentials and ISE Internal users am able to authenticate. Everything is okay 01. By using local P...

Hi, Our customer wants to integrate Cisco ISE with Azure AD, and they want to use AutoPilot to autoprovision the computers. But how can we authenticate and authorize a computer that dont have anything? If we integrate with Intune this will work? Envi...