Network Access Control

Hi my name ia Ivan i would like to know if is possible to do an array in HA primary and replica using two Cisco ISE differents, in software y hardware  exámple: ise Appliance in HA with ISe virtual  or two ISE's with different part Numbers. is there ...

Hello, we are working on a customer PoC where we need to use an extreme switch (X440), does anyone has any axperience with it?We are having some serious issue in configuring dot1x and MAB on it.Also, we would like to work on the SNMP CoA and might us...

Hello, I am setting up a lab with ISE and Extreme switching where I would like to test profiling.I am wondering if anyone has trying to do anything similar and has any experience to shareRegardsFrancesca

Good Morning; I am in the process of upgrading our ACS 5.6 VM servers to ACS 5.7. The ISO File, 5.7 Tar, and Base Patch works fine. The issue  we are running into appears to be after each cumulative patch upgrade. The "Show Application Status ACS" di...

Just a quick question: Is Anyconnect Apex license required if we only use Anyconnect NAM as a 802.1x supplicant rather than Posture functionality?Of course, I understood that Anyconnect Apex is required when Anyconnect NAM is working for Posture for ...

Hi All, In the process of building Cisco ISE 1.4 for a customer. Will Cisco ISE EAP-TLS authentication work with a server certificate that has Signature algorithm of sha256RSA and signature hash algorithm of sha256. Client certificates also use signa...

Hi,What is the procedure to migrate a deployment of 33xx appliances with ISE 1.2 to 35xx appliances with 2.0.1 ?33xx does not support 2.x and 35xx does not support ISE lower than 2.0.1. So normal upgrade is not possible.Can this work: upgrade 33xx to...

Hi everyone,From reading the design guides on pxGrid, I understand that it is recommended to use a distributed deployment model with separate, dedicated nodes for the primary and secondary pxGrid controller.  However, for small deployments where we w...

Is there a way to change the fqdn w/o needing to re-configure ISE from scratch? I have a 2-node deployment.  The domain is changing - so I have a new wildcard cert for the new domain, but the server's current fqdn won't work w/ the new cert.