Hi experts, I need to use dACL from ISE to filter MAB groups. I understand that the best way is of course to use a firewall, but this is not currently possible on this part of the network. I have 2 use cases Use Case 1 - the endpo...
Hi team,We are planning to create a new setup for ise.Actually we have a cisco ise for that particular location but that deployment is globally deployed. we plan to create a seperate setup for that particular location. So Please help we what are the ...
We are facing issues related to the ATM, Printers they all have static IP adresses. After succcesfull authetication of the MAB it works fine but after sometime maybe 2 hours or 5 hours they get APIPA IP adresss. Issue gets resolved after shut/noshut ...
Hello It's been a while since I have had to deal with an ISE Portal issue. Today was a struggle to get Android devices to not complain when trying to connect to a simple ISE Hotspot Portal. It was surprising to me that Windows and Apple iOS devices...
Hi,I want to allow a user to upload\download files remotely to\from a Cisco Router using Secure Copy (SCP) and SSH.However it doesn't work unless i give the user a Privilege level of 15.Does anyone know, if this can work with a Custom Privilege Level...
We have planned ISE version upgrade from 2.7 to 3.2, but some of our endpoints are still using 4.10.3 AnyConnect version and are in progress of agent upgradation. Our Licenses are getting expired soon and want to upgrade server at the earliest. Nee...
Dear All,I have setup a Trustsec Laboratory, composed by Cisco ISE 3.2, and 3 switches enrolled in the Trusec domain.I have attached a Test PC SGT 16 on a 9300 switch that is connected with an uplink to a 9500 switch, and the 9500 has a portchannell ...
New to ISE and looking for some direction here.I'd like to limit access to certain assets to a few jump servers. Not all traffic is going through a firewallHow can i control what devices can access things like vCenter, backup devices, IPMI interfaces...
asking for my group to create a new vmware repository for our ISE 3.2 cluster (4 nodes = primary PAN/MnT & PSN and secondary PAN/MnT & PSN) and I see this note on Cisco Docs under "Create Repositories":"Cisco ISE initiates outbound SSH or SFTP connec...
Currently in our infrastructure we are using ISE version 3.2. There was vulnerability raised for CISCO ISE HSTS on port 8084. Can anyone please confirm the fix version for the same?
Hi,I am currently trying to upgrade the system of a Cisco Firepower FPR1120 from version 7.0.4-55 to the latest stable release 7.2.5-208. Precheck passess successfully however when implementing the upgrade I get the following upgrade error "Fatal err...
Hello,I've updatet a small deployment (2 sns3615) to version 3.3 patch 2, and now I get temporarily no snmp Data from the primary node.On secondary and on a virtual Test machine everything's fine.On every node the same running config (snmp, timezone)...
In my case, the customer wants to tag the third party (parnters) traffic connected to the company. The third parties are connected via MPLS or Internet IPSec tunnels to a perimeter router and the traffic is then filtered on Firepower. At this point, ...
Hello,I am planning a manual failover from Active to Secondary.And in order for the Primary to become offline, I was wondering whether it is sufficient to shut down its network interface.Next, the role of the Secondary has to be manually set to prima...
Hello ISE guys,we are running ISE 3.2 deployment and a few days ago we had to reboot both our PAN Nodes. Reboot Secondary (B Node), wait, promote to primary (A->B), wait, reboot secondary (A Node). Since then we are facing CSSM licensing problems -> ...
