Network Access Control

Hi all,does someone know if it is possible to validate AnyConnect Identity Extensions (like device ID) against an external DB? I know it's possible by using ASA DAP, but customer would like to do it centrally on ISE. Could not find a way (tried to do...

Can we use different interface(non-management interface) on ISE for web-logon portal? Customer is now setting up ISE2.2 for their environment (for dot1x / Webauth with switches)… .. They are using single IP-address ( management VLAN) -which is not ac...

Hi Experts,A customer of mine is trying to integrate their home grown Identity Management system with ISE via REST API's. They want to test passing MAC address info to the ISE Database using the API's. The developer has come to me asking for the belo...

HiI have studied the ISE licensing consumption theory in Chapter 20 of the ISE 2.2 Admin Guide, but I still have a question about a particular use case.  What happens if a user is authenticated via Radius and authorised, but the NAD (for whatever rea...

HiCan you run a PCAP capture on ISE PSN?Or do you just have to monitor the port?Cheers in advance

Dear allI have ACS 5.1 and Catalyst switch 3560 with version 12.2(53)SE. I configure a dacl on the ACS and I use it on authorization profile.This authrization profile is used on access policy. I tried the authentication but it doesn't work. I checked...

Hi,I got an issue with Apple devices such as iPhone and iPADs when connecting through VPN the ISE is not doing profiling with the Apple devices.With Android is working well. We create a policy for Android devices that connect through AnyConnect VPN f...

Hi Team,We are doing a POC with ISE 1.3 and customer is using Anyconnect to permit Win7 endpoint to choose one of their certifcates.Now we release there could be a problem between Anyconnect and HP Connection Manager installed on the endpoints.Custom...

Hi,How exactly failover works between two branches of ISE distributed ISE deployment ?I have a requirement in ISE distributed deployment between two branches of an organization:What i want to achieve is: failover between Branch Office1 in India and B...

Hi,I was reading an older post that says "you have two options to do that, either import all mac address to ISE and have your policy look into this endpoint group with username or have an MDM"the MAC address thing doesn't scale and not the best appro...

Hello,at the moment we use ISE 2.1.0.474 for 802.1x. For our clients we do use machine certidicate authentication. And MAB for Printers, AccessPoints, Linux and Apple Devices.Our Problem is our default PXE option on our windows client. Our thinking a...