Network Access Control

We're only using Cisco AnyConnect for NAM not VPN. Version 4.10.04071We have employees at home using AnyConnect to get onto their home network and then connect to the corporate network via F5 Big-IP VPN tunnel. When the VPN tunnel closes or ends (man...

Hello All,I have a question regarding ISE. We want to profile various devices in the IoT sector. These devices cannot use dot1x, so we are using MAB. My question is, what is the most efficient way to create these MAC groups? Is it sufficient to leave...

Hi,How do I upload a NVM XML profile so it is deployed by ISE to the AnyConnect clients? Since there is not a specific "NVM Profile" option when adding a new resource, should I select the generic "Agent Resources From Local Disk",  then "Customer Cre...

Hi Community,I'm facing issues with anyconnect 4.10 in windows 11 computer. (Anyconnect Secure Mobility Client)I have configured a file profile "configuration.xml" in attached file (rename in.txt) with Network Access Manager profile Editor and push i...

When I run the ISE installer, it never gives me the opportunity to set an IP address.  It starts the installer automatically.  How can I pause the installer and get a static IP set  properly so it can download the packages?

Hello, I have an existing ISE deployment already integrated with Microsoft AD. Now we have an ongoing implementation of Cisco WSA and there is a requirement to use ISE for transparent authentication. So should I need to purchase additional license fo...

HiI recently upgraded an ISE deployment from 2.7 patch 7 to 3.2 patch 3. One of the PSNs failed during the upgrade so I deregistered the node and manually installed 3.2 patch 3 before re-registering it with the deployment.All services are working fin...

Per @Arne Bier request from another post :) Sharing two python scripts that have helped me automate some manual tasks here in our environment.  get_img_grp_macs_scrub: Runs and dumps a specific endpoint group to screen and creates a csv file with tot...

Hello, I can't configure the line con 0 with the command login authentication CONSOLE. I get the following error: sy-xxxx-ch-xxx-s-0xx(config-line)#login authentication CONSOLE Command authorization failed. The tacacs is up and running because I'm al...

Hi, I can get bulk create, bulk delete and bulk status (using a bulk ID) to work, but not bulk read.  What is the format?  ISE documentation on SDK is bad, nothing on bulk read and delete.   I tried operationType="get", and operationType="read", with...

Is it possible to set a maximum value for ise cpu alarm? for exampleWhen cpu is at 60%, A cpu high alarm will appear. If notAt what percentage of CPU is the alarm displayed?

Hello TeamPlease how to Block NMAP port Scanning from Guest wireless Network ?I have configure Guest wireless. Guest is not able to ping Any ressource But NMAP scanning is working. All Private IP execept ISE, DHCP and DNS is Deny, but NMAP is still a...