Ciao, starting from this document: https://www.cisco.com/c/en/us/support/docs/field-notices/724/fn72427.html I understand that integrates Microsoft InTune for posture validation via VPN, is not a long term solution: For VPN-based endpoints, rely sole...
Hi all,I contact you regarding a basic question regarding SGT use case.We have a network composed of:- Core switch (Cisco) in our Cisco Fabric, that manage access to all other switches and servers- Access switches (Cisco) in our Cisco Fabric too for ...
Hello there, I am using ISE API to get or post requests to it and I know that ISE's default response body is in XML format, I just wonder if I can just change that to JSON, (I know that I can set Accept header to application/json to accomplish that b...
Hello everyone! I am trying to set a system up, and for some reason my ports just keep turning off. I believed it was simply a port security issue. But then I had my router, switch, server- all reboot themselves at once. I can console into my router,...
Dear Expert I'm using windows server nps and using c2960 in a lab, I have a laptop connected to the port and auth success.but the port keeps jumping to the voice domain, even I use the 802.1x to assign the VLAN for the port, it still remains on the d...
Hi all,what's the way to check the hardware model the ISE runs on?I don't seem to find this info on the GUI.Gio
Version: 3.1.0.518 Patch 6 and 7 The client can register once on the ISE via EAP-TLS with a certificate - after that problems arise.If you restart the notebook, it works again once.At patch 6Approx. 250 users affected:The ISE log shows that an EKU th...
Hi all,I'm in charge to safely bring a pair of SNS-3615-K9 from 2.7 patch 2 to the latest ISE release, 3.2.0.I'm looking for the safest solution and to minimize downtime. Needless to say 2.7 must be upgraded to the latest patch, at the moment being 1...
Please help with the Vendor ID of AVI devices.
Hi All,we have encountered with the implementation of dot1.x on our remote access VPN users. Since the implementation, we have noticed that our remote access users are unable to log in using their Active Directory username. Instead, we are required t...
Hello everyone,I have a bit of a weird situation I'm trying to get working. Lets say I have this theoretical setup. What I'm trying to do is configure some sort of 802.1x authentication over these wired links. So the ActiveDirectory machine is a Wind...
Hiim preparing to upgrade our single ISE node from v3.0 to 3.2ive come across the URT tool but theres a couple of warnings in the guide and id like to confirm if its safe to run this toolThe warnings areDo not run the URT on the Primary Policy Admin...
Do we need to allow any direct communication between ISE and the supplicant? On what port number? I know its radius between the authenticator and ISE ports 1812 and 1813 but from the drawing below, there looks like traffic between the clients and ISE...
Hi Guys,I am using ISE 2.7 patch 3 with EAP-TLS for my 802.1x authentication. Authentication was successful however, I noticed in the RADIUS Live Logs that the username field has a dollar sign ($) at the end. Is that normal or is it a cosmetic bug?Th...
Dear Team,We are having distributed deployment of ISE nodes for RADIUS that is 2 PSN, 2 PAN and 2 Monitoring nodes. We are planning to upgrade the firmware from 2.6.0.156 Patch 10 to 3.1.0.518 Patch 4.I was running URT application on Secondary admini...
