Network Access Control

Hi,does anyone has a configuration example in order to use ECC ciphers with ACS 5.8. I noticed patch 4 support ECC for AAA flows, but i am looking for a guide and/or example in order to use it for EAP-TLS authentication.thanks in advance!Best Regards...

Hi,  I've got an interesting request from a customer today.  They are using their guest portal for both regular guest users and employees. They would like the employees to connect only once to the portal and then be connected automatically... easy, y...

Hi Team, Do we have a step-by-step migration guide from a standalone to a fully distributed deployment model?How can we separate Admin and Mnt personas if we want to keep the existing logs?Do I see it correctly that we should separate the Admin perso...

Hi AllI am little confused on the port number 8905 for ISE communication, can you help meThe administration guide says the ISE node is discovered on port 80 first & then on port 8905. If the port 80 discovery goes fine, will the anyconnect still try ...

Hi Team, Could you please let us know how quickly ISE gets an update about patches if, for example,Microsoft is publishing a new patch?I guess, this depends on OPSWAT, and I see ISE can initiate an update in every hour from backend system, but I cann...

All,The attached picture is of an endpoint in my customer's system.  You can see that the endpoint has been in there for 600+ days but the inactive days is 0.  There is no selected authorization profile so most likely this device has never authentica...

Hello,Trying to get Guest/CPP redirection working on a 3850 running 03.07.05.E. My .1x client VLAN is using a VRF and I can access the URL if I manually enter the redirect URL, I just cant get it to automatically redirect. I came across this from a p...

What are the parameters other than CPU, Memory and Storage that should be monitored on Cisco ISE in order to do capacity planning effectively. Currently ISe 3395 with version 1.4 is active in the production environment in distributed deployment mode.

Hi all,my customer is looking for a way to export all within ISE configured dACLs to hand them off to for example a security auditor for review.Could not find anything in API or on the GUI to do this tak. Am I missing something?Thanks in advance.Rola...

Hi Team, According to the doc, operation "Delete" can be used with Bulk method even with JSON or XML (ISE 2.2) for Endpoints` management. Can you please confirm it?Since URL (https://ise/ers/config/endpoint/{id})  contains the ID of the Endpoint,coul...

Anyone out there experienced with using ISE as an Intermediate CA for BYOD?When using ISE as an intermediate CA we seem to get odd results in the windows client certificate issued by the BYOD process. We have observed the same in ISE 1.3 and 2.0 patc...

Is it possible to integrate ISE with Meraki MR for wireless guest access using SMS as a method to deliver user credentials? Anyone tested this before? What are the gotchas and best practices?