Anyone here has the xml file for Juniper EX switch that has the redirect profile needed also? Or if anyone has docs how to work with redirection on Juniper for ISE Posture?
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Resolved! ISE - Wired Dot1x EAP-TLS - Intermittent
HiNew to ISE and want to use it for Dot1x authentication of windows AD clients using computer certificates with a Cisco 2960X switch.I've got this working and the live logs show success and always end with a 'Returned RADIUS Access-Accept' My issue i...
For some reason I cannot get my switch to authenticate with ISE for CTS. The live logs show Event 5405 RADIUS Request dropped Failure Reason 11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute .As far as ISE config e...
Resolved! Attributes for anomalous behaviour
One of my client requested for implementing anomalous behavior on Endpoints, however I have gone through Cisco documentation on this but still have unclear explanation.The default condition on ISE for anomalous behavior states: Endpoints:AnomalousBe...
Implementing 802.1x using machine certificates issues to endpoint through IntuneCan Cisco ISE 3.2 EAP-TLS with Microsoft Azure Active Directory connection using machine certificate to authenticate the endpoint onto the network?The article note in Con...
Hello, We have an ISE distributed deployment of 8 nodes, distributed as shown below, DC-1SNS-3695-K9Primary Admin NodeDC-1SNS-3695-K9Primary Monitoring NodeDC-1SNS-3655-K9Policy Service NodeDC-1SNS-3655-K9Policy Service Node DC-2SNS-3695-K9Secondar...
Resolved! Cisco ISE 2.4 to 3.0 upgrade Failure
Hi Team,we are testing upgrade of ise version 2.4 to 3.0, we are having 2 PAN, 2 PSN and 2 M&T in test environment. when we initiated the upgrade it was successful on Secondary PAN but failed on Primary M&T with below error. can you let us know reaso...
Resolved! Cisco ISE instalation error
I am trying to install Cisco ISE2.0 on the hyper-v environment, i have encountered with an error message that say Error: Unsupported hardware detected! Cisco UDI (Unique Device Identifier) not found on this appliance. Exiting Installation.
Hi, I configure our ISE with easyconnect, i set up a policy for Wired_MAB and give to default authorization HostLookUp to authorize the machines to contact the domain controller and dhcp server. when i connect the machine ISE respond with default acc...
Our ISE server return VLAN names for various user vlans as based on user identity. Some of them doesn’t apply to certain area. On those switches, there is no corresponding vlan. We want a certain vlan host all users in such area. Say HR user log in t...
Hi All, I am integrating Fortigate firewall with Cisco ISE (version 2.4, patch 13) using TACACS, authentication is getting successful but authorization fails. Below are the attributes given in TACACS Profile. After logging into the firewall user is n...
Hello everyone,We leverage ISE for AAA and the Cisco Network Setup Assistant App from the Google play store for provisioning of certificates on non-iOS devices. The devices are able to provision and function on the network just fine for about ~30 day...
Hello ,I would like to integrate CISCO ISE with Fortigate so that the ISE manages the authentication of users connected by Wifi (fortiAP) and also the SSL VPN. I can't find any documentation on this.Can you help me please tell me if it is possible an...
Hello All, We have ISE, WLC and AP 9100 series and Catalyst switches 9300 series. All ports are configured for 802.1X. When AP connects to port it uses credential (configured on WLC) to authenticate with ISE and after successful authentication the po...
I'm attempting to set up a Dual-SSID flow on a test deployment of ISE. I initially tried a Single-SSID flow but ran into a chicken or the egg issue with Android and certificates (want to do a long private cert but then Android wants a public one for...
