Network Access Control

Our 1121 Appliance is EOL. The decision was made not to migrate to ICS, at this time. We decided to migrate from the 1121 appliance ACS 5.6 to VM ACS 5.8. I have been searching for documents on best practices for doing this but have had little succes...

Hi; I configure ISE to redirect the guest users toward the Guest portal and everything works fine. but at the end, ISE adds the guest's MAC address to the local DB and the second time the same person wants to access the network, its MAC address match...

OK, we use an unauth acl on switches and send back to use the auth ACL on proper 802.1x verification.Now, this is annoying to maintain and change and they wanted to see about moving this to ISE. My issue is that if the PC can't be verified, it never ...

Hi experts,What is the impact of removing PSN nodes from a Node group ?Does the PSNs get restarted ?

We have a customer that is asking if port TCP 464 “KPASS” is required to be opened between the ISE and AD. If yes, what is the exact purpose of opening this port and is it required during the authentication phase ?

Hi,We have a simple scenario where guest portal is hosted on WLC and guest users are made on ISE via a sponsor portal.The WLC is sending PAP-ASCII authentication requests to ISE.Is there any reason that the PSNs at any event or time will be sending a...

OK, We are using ISE 2.1 for wireless and are investigating it for wired. All is fine until we tried an Avaya phone.The phones use EAP-MD5 to pass credentialISE works fine with it, but I get this error and it skips checking AD.22043Current Identity S...

HI,My customer wants to purchase a virtualized ISE (a VM on a server), and to add into his cluster of ISE appliances. The intent is to increase workhorse power for ISE. Both physical and virtualized ISE shared the same number of end-points license.Th...

Hi ISE experts,If we're using IBM MaaS360 for mobile device management, I know it can integrate with Cisco ISE for mobile devices.  MaaS360 can also have macOS (OS X) and Windows 10 PC enrolled via MDM.  Essentially like MDM devices too.Therefore, ca...