Network Access Control

Hi Experts,A customer of mine is trying to integrate their home grown Identity Management system with ISE via REST API's. They want to test passing MAC address info to the ISE Database using the API's. The developer has come to me asking for the belo...

HiI have studied the ISE licensing consumption theory in Chapter 20 of the ISE 2.2 Admin Guide, but I still have a question about a particular use case.  What happens if a user is authenticated via Radius and authorised, but the NAD (for whatever rea...

HiCan you run a PCAP capture on ISE PSN?Or do you just have to monitor the port?Cheers in advance

Dear allI have ACS 5.1 and Catalyst switch 3560 with version 12.2(53)SE. I configure a dacl on the ACS and I use it on authorization profile.This authrization profile is used on access policy. I tried the authentication but it doesn't work. I checked...

Hi,I got an issue with Apple devices such as iPhone and iPADs when connecting through VPN the ISE is not doing profiling with the Apple devices.With Android is working well. We create a policy for Android devices that connect through AnyConnect VPN f...

Hi Team,We are doing a POC with ISE 1.3 and customer is using Anyconnect to permit Win7 endpoint to choose one of their certifcates.Now we release there could be a problem between Anyconnect and HP Connection Manager installed on the endpoints.Custom...

Hi,How exactly failover works between two branches of ISE distributed ISE deployment ?I have a requirement in ISE distributed deployment between two branches of an organization:What i want to achieve is: failover between Branch Office1 in India and B...

Hi,I was reading an older post that says "you have two options to do that, either import all mac address to ISE and have your policy look into this endpoint group with username or have an MDM"the MAC address thing doesn't scale and not the best appro...

Hello,at the moment we use ISE 2.1.0.474 for 802.1x. For our clients we do use machine certidicate authentication. And MAB for Printers, AccessPoints, Linux and Apple Devices.Our Problem is our default PXE option on our windows client. Our thinking a...

Hi expert,I got an query from our ISE end user on the below vulerability:  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170310-struts2but there are some quesitons I need to confirm with you:1. in the vulnerability,...

Hi All,I am running ISE 2.2 with self register portal with sponsor approval. We have 2 sets of sponsor identity sequences, one AD and one SAML, so i believe we need to run 2 sponsor portals. Is there a way to identify the sponsor based on the email a...