i'm sorry if this question is too much of a newbie question. or has been covered else where but only one of my company's two ise nodes is joined to my company's microsoft active directory. the other node should be joined too right? background info: j...
We have RADIUS setup on our switches with 2x RADIUS servers used for authenticating admin access to the switch's, and 1x RADIUS server used for port authentication for devices (not ISE).When the RADIUS server for port authentication is lost, I need t...
Hello I am configuring ISE posture and verified that there is no remediation for CrowdStrike. What can I do in that case? Thank you Marcos
Hello we are about to start an ISE posture implementation and I would like to understand automatic remediation of our anti-malware. In ISE, we just need to set the the remediation action and that is it? How will the client know how to download and in...
I'm trying to setup an authorization policy that matches on the PC name for certain devices and I can't seem to figure out the syntax properly. The computer names I'm trying to match on would be PC01Client .. PC999ClientSo the regex I have tried is:P...
Hey all, I've recently patched our distributed ISE cluster from 3.1.0.518 (No Patch) to 3.1.0.518 (Patch 5). Cluster consists of 2 x PAN, 2 x MNT, 4 x PSN all on physical SNS hardware. I was playing with the idea of upgrading to 3.2.0, but I receive...
In el process of debug dot1x of switch with 802.1x show message dot1x-ev:[Gi1/0/3] Dot1x authentication unable to start - Authenticator NOT enabled. The port not authenticates with 802.1x. The debug shows that the host sending packet EAPOl, both the...
Hello All,I am working on a custom password changer for Cisco ISE identities.Following the documentation we enabled ERS and created an ERS admin account.When attempting to send a PUT request, the server responds with an internal error, debug hints at...
HiI have an ISE 2.7 patch 7 distributed deployment that is bound to AD.AD was recently patched with regards to CVE-2022-38023. Since then, the AD admins are reporting that the PSNs are appearing in their logs every few hours with "The Netlogon servic...
Hi, We already have an ISE deployment connected to an AD domain with 2 DC We are going to add new Domain Controller to the Domain (and remove the old ones later) and would like to know if we need to change things on ISE or if it is transparent since ...
I am currently running ISE 3.0 patch-3 on SNS-3655 appliances in a 4 nodes cluster environment. We've been running ISE version 3.0 since July 2021 and will be patching those nodes to patch-7 next month. Everything is working fine with version 3.0 i...
Good morning,I've read so many conflicting posts on this subject and the documentation on changing the IP address of a PSN in a distributed environment either doesn't exist or I can't find it. I'm actually just trying to re-mask the IP, not change t...
Hello, I just installed a C9200 stack and configured the MAB with a RADIUS server. I added the mac address of my 40 users in the RADIUS, then I activated the MAB the necessary ports.When I did this 2 days ago everything was fine a priori, but today a...
Hello, I want to download the local backup file via HTTP / HTTPS using my Linux server. I have Python installed on my Linux server so I thought I would be able to use the REST API on ISE to download this file. HTTP/HTTPS repository is not supported o...
Team,I'm trying to edit my private CA I use for EAP Authentication with my PSN's. For the EAP-TLS, everything works great - policy set validates the SHA-256(etc) for certificate handshakes and my endpoints are authenticated to the network. What I am ...
